ruby-lang.org Archives - 22 February 2013, Friday

REXML におけるエンティティ展開に伴うサービス不能攻撃について

ruby-lang.org 22 Feb '13, 1pm

class REXML::Document @@entity_expansion_text_limit = 10_240 def self.entity_expansion_text_limit=( val ) @@entity_expansion_text_limit = val end def self.entity_expansion_text_limit @@entity_expansion_text_limit end end class REXML::Text def self.unnormalize(string, doctype=nil, filt...
Related:
1. Vulnérabilité de type Déni de service par expansion des entités dans REXML ... ruby-lang.org 23 Feb '13, 2pm
Ruby 1.9.3-p392 リリース

ruby-lang.org 22 Feb '13, 1pm

<URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p392.tar.bz2> SIZE: 10024221 bytes MD5: a810d64e2255179d2f334eb61fb8519c SHA256: 5a7334dfdf62966879bf539b8a9f0b889df6f3b3824fb52a9303c3c3d3a58391 <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p392.tar.gz> SIZE: 12557294 bytes...
Related:
1. Ruby on Rails入門 rubylife.jp 21 Feb '13, 10am
2. Join the Girls for Ruby on Rails! us5.campaign-archive2.com 22 Feb '13, 10am
3. Ruby 1.9.3-p392 is released ruby-lang.org 22 Feb '13, 1pm
4. Classified auto parts website ruby on rails | AJAX | Ruby & Ruby on Rails freelancer.com 22 Feb '13, 6pm
5. Ruby Science: Extracting and Using Classes robots.thoughtbot.com 22 Feb '13, 4pm
6. Learn Ruby on Rails, Come to RailsBridge! - Eventbrite bf-railsbridge-i-estw.eventbrite.com 22 Feb '13, 12pm
7. Featured Job: 2 Ruby on Rails Developers – OOP / MySQL / Ruby / JavaScript ... cv-library.co.uk 22 Feb '13, 5pm
8. Vacature: Ruby ontwikkelaar / Ruby on Rails – afwisseling & uitdaging! - Ap... apeldoornvacaturebank.nl 21 Feb '13, 12am
Denial of Service and Unsafe Object Creation Vulnerability in JSON (CVE-2013-0269)

ruby-lang.org 22 Feb '13, 1pm

There is a denial of service and unsafe object creation vulnerability in the json bundled with ruby. This vulnerability has been assigned the CVE identifier CVE-2013-0269. We strongly recommend to upgrade ruby. Details When parsing certain JSON documents, the JSON gem (includes bundle...
Related:
1. JSON におけるサービス不能攻撃および安全でないオブジェクトの生成について (CVE-2013-0269) ruby-lang.org 22 Feb '13, 1pm
2. Ruby on Rails CVE-2013-0276 Remote Security Bypass Vulnerability securityfocus.com 21 Feb '13, 6pm
JSON におけるサービス不能攻撃および安全でないオブジェクトの生成について (CVE-2013-0269)

ruby-lang.org 22 Feb '13, 1pm

module JSON class << self alias :old_parse :parse def parse(json, args = {}) args[:create_additions] = false old_parse(json, args) end end end
Related:
1. Denial of Service and Unsafe Object Creation Vulnerability in JSON (CVE-201... ruby-lang.org 22 Feb '13, 1pm
Ruby 1.9.3-p392 is released

ruby-lang.org 22 Feb '13, 1pm

Now Ruby 1.9.3-p392 is released. I apologize for updating too frequently. This release includes security fixes about bundled JSON and REXML. Denial of Service and Unsafe Object Creation Vulnerability in JSON (CVE-2013-0269) Entity expansion DoS vulnerability in REXML (XML bomb) And so...
Related:
1. Ruby 2.0.0-p0 is released ruby-lang.org 24 Feb '13, 9am
2. Ruby 1.9.3-p392 リリース ruby-lang.org 22 Feb '13, 1pm
3. Ruby 2.0.0-p0 is released ruby-lang.org 24 Feb '13, 6pm
4. JRuby 1.7.3 Released jruby.org 21 Feb '13, 5pm
5. Ruby 2.0.0-p0 is released ruby-lang.org 24 Feb '13, 5pm
6. Ruby Science: Extracting and Using Classes robots.thoughtbot.com 22 Feb '13, 4pm
7. More Rails security fixes released - The H Security: h-online.com 12 Feb '13, 4pm
8. More Rails security fixes released - The H Open: h-online.com 12 Feb '13, 4pm
The Barcelona Ruby Conference Call for Papers is Open

ruby-lang.org 16 Feb '13, 2pm

The Barcelona Ruby Conference Call for Papers is Open Barcelona Ruby Conference is a conference that takes place in the heart of Catalunya, Spain this September 14-15. Starring world-class speakers as Aaron Patterson (rails and ruby core), David Chelimsky (The RSpec book author, RSpec...
Related:
1. 1 year old but still usefull. Slides from my #RoR security talk at Source B... blog.gdssecurity.com 20 Feb '13, 9pm
2. Ruby 1.9.3-p392 リリース ruby-lang.org 22 Feb '13, 1pm
Ruby 2.0.0-rc2 is released

ruby-lang.org 14 Feb '13, 6pm

Ruby 2.0.0-rc2 is released. This will be the last release candidate of Ruby 2.0.0. Please give it a try, and report any issue if you notice. Locations <URL:ftp://ftp.ruby-lang.org/pub/ruby/2.0/ruby-2.0.0-rc2.tar.bz2> SIZE: 10822239 bytes MD5: e92420131bd7994513e0bf09a3e2a19b SHA256: d...
Related:
1. Ruby 2.0.0-rc2 is released ruby-lang.org 08 Feb '13, 2pm
2. Ruby 2.0.0-p0 is released ruby-lang.org 24 Feb '13, 9am
3. Now Hiring: Ruby script for Sketchup - Ruby Google SketchUp: The included v... spacecoastprojects.donanza.com 16 Feb '13, 2am
4. Install Ruby and Ruby On Rails on Ubuntu arraystudio.com 14 Feb '13, 4pm
5. Everyday Rails Testing with RSpec, the book now covers Capybara 2.0, RSpec'... everydayrails.com 13 Feb '13, 10pm
Ruby 2.0.0-rc2 is released

ruby-lang.org 08 Feb '13, 2pm

Ruby 2.0.0-rc2 is released. This will be the last release candidate of Ruby 2.0.0. Please give it a try, and report any issue if you notice. Locations <URL:ftp://ftp.ruby-lang.org/pub/ruby/2.0/ruby-2.0.0-rc2.tar.bz2> SIZE: 10822239 bytes MD5: e92420131bd7994513e0bf09a3e2a19b SHA256: d...
Related:
1. Ruby 2.0.0-rc2 rubyflow.ru 09 Feb '13, 10am
2. Ruby 1.9.3-p385 is released ruby-lang.org 06 Feb '13, 1pm
3. A “FREE” Ruby Metaprogramming Course – Learn to Think in Ruby rubylearning.com 08 Feb '13, 9am
4. Learning Ruby on Rails | Heather Burke's Blog heatherburke.co.uk 08 Feb '13, 11am
5. Ruby 2.0.0-rc2 is released ruby-lang.org 14 Feb '13, 6pm
6. Ruby 2.0.0-rc2 リリース ruby-lang.org 08 Feb '13, 2pm
7. 131 - February 7, 2013 rubyweekly.com 07 Feb '13, 3pm
8. Changes to existing Ruby on Rails site | Ruby & Ruby on Rails | Website Design freelancer.com 08 Feb '13, 7pm
Ruby 2.0.0-rc2 リリース

ruby-lang.org 08 Feb '13, 2pm

<URL:https://speakerdeck.com/a_matsuda/ruby-2-dot-0-on-rails> <URL:http://globaldev.co.uk/2012/11/ruby-2-0-0-preview-features/> <URL:http://www.infoq.com/news/2012/11/ruby-20-preview1> <URL:http://timelessrepo.com/refinements-in-ruby> (Refinements) <URL:http://el.jibun.atmarkit.co.jp/...
Related:
1. Ruby 1.9.3-p385 リリース ruby-lang.org 06 Feb '13, 1pm
2. Ruby 2.0.0-rc2 is released ruby-lang.org 08 Feb '13, 2pm
3. A “FREE” Ruby Metaprogramming Course – Learn to Think in Ruby rubylearning.com 08 Feb '13, 9am
4. Changes to existing Ruby on Rails site | Ruby & Ruby on Rails | Website Design freelancer.com 08 Feb '13, 7pm
5. Ruby 2.0.0-rc2 rubyflow.ru 09 Feb '13, 10am
6. Ruby on Rail Programmer odesk.com 09 Feb '13, 9am
7. Ruby on Rails Developer | Ruby & Ruby on Rails | Software Architecture freelancer.com 07 Feb '13, 9am
最近のニュース

ruby-lang.org 08 Feb '13, 3am

Content available in English , French , Japanese , Korean , Polish , Spanish , Portuguese , Simplified Chinese , Traditional Chinese , Bahasa Indonesia , German , Italian , Czech , Bulgarian and Turkish . このサイトはRubyとRadiant CMS によって構築されています。また、コンテンツはRubyコミュニティによって管理されています。質問やコメントは w...
RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256)

ruby-lang.org 06 Feb '13, 2pm

diff --git darkfish.js darkfish.js index 4be722f..f26fd45 100644 --- darkfish.js +++ darkfish.js @@ -109,13 +109,15 @@ function hookSearch() { function highlightTarget( anchor ) { console.debug( "Highlighting target '%s'.", anchor ); - $("a[name=" + anchor + "]").each( function() { - ...
Related:
1. RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256) ruby-lang.org 06 Feb '13, 1pm
2. XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256) ruby-lang.org 06 Feb '13, 1pm
3. Ruby 1.9.3-p385 リリース ruby-lang.org 06 Feb '13, 1pm
RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256)

ruby-lang.org 06 Feb '13, 1pm

diff --git darkfish.js darkfish.js index 4be722f..f26fd45 100644 --- darkfish.js +++ darkfish.js @@ -109,13 +109,15 @@ function hookSearch() { function highlightTarget( anchor ) { console.debug( "Highlighting target '%s'.", anchor ); - $("a[name=" + anchor + "]").each( function() { - ...
Related:
1. XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256) ruby-lang.org 06 Feb '13, 1pm
2. RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256) ruby-lang.org 06 Feb '13, 2pm
3. Ruby 1.9.3-p385 is released ruby-lang.org 06 Feb '13, 1pm
4. 131 - February 7, 2013 rubyweekly.com 07 Feb '13, 3pm
5. Ruby on Rails development | HTML | MySQL | PHP | Ruby & Ruby on Rails | Web... freelancer.com 06 Feb '13, 2am
6. Ruby on Rails Barter Site | Graphic Design | HTML | Logo Design | Ruby & Ru... freelancer.com 05 Feb '13, 9pm
Ruby 1.9.3-p385 リリース

ruby-lang.org 06 Feb '13, 1pm

<URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.tar.bz2> SIZE: 10021486 bytes MD5: 5ec9aff670f4912b0f6f0e11e855ef6c SHA256: f991ee50414dc795696bad0fc5c7b0b94d93b9b38fed943326d20ce4e9dda42b <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.tar.gz> SIZE: 12546003 bytes...
Related:
1. Ruby on Rails Developer | Ruby & Ruby on Rails | Software Architecture freelancer.com 07 Feb '13, 9am
2. Ruby 2.0.0-rc2 リリース ruby-lang.org 08 Feb '13, 2pm
3. Développeur ruby on rails anglophone - Outsourcia, Casablanca offres-emploi.ma 05 Feb '13, 10am
4. Developer contractjob.net 04 Feb '13, 11am
5. Ruby on Rails development | HTML | MySQL | PHP | Ruby & Ruby on Rails | Web... freelancer.com 06 Feb '13, 2am
6. RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256) ruby-lang.org 06 Feb '13, 2pm
7. Download analytics-ruby 0.1.0 - A Ruby library for loading analytics code -... webscripts.softpedia.com 01 Feb '13, 2pm
8. Javascript/Ruby Expert | Google App Engine | Javascript | PHP | Python | Ru... freelancer.com 06 Feb '13, 3pm
XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256)

ruby-lang.org 06 Feb '13, 1pm

RDoc documentation generated by rdoc bundled with ruby are vulnerable to an XSS exploit. All ruby users are recommended to update ruby to newer version which includes security-fixed RDoc. If you are publishing RDoc documentation generated by rdoc, you are recommended to apply a patch ...
Related:
1. RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256) ruby-lang.org 06 Feb '13, 1pm
2. RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256) ruby-lang.org 06 Feb '13, 2pm
Ruby 1.9.3-p385 is released

ruby-lang.org 06 Feb '13, 1pm

Now Ruby 1.9.3-p385 is released. This release includes a security fix about bundled RDoc. See this page for details. And some small bugfixes are also included. See tickets and ChangeLog for details. Download You can download this release from: <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9...
Related:
1. Ruby 2.0.0-rc2 is released ruby-lang.org 08 Feb '13, 2pm
2. RDoc で生成した HTML ドキュメントにおける XSS 脆弱性 (CVE-2013-0256) ruby-lang.org 06 Feb '13, 1pm
3. Ruby 1.9.3-p385 リリース ruby-lang.org 06 Feb '13, 1pm
4. 131 - February 7, 2013 rubyweekly.com 07 Feb '13, 3pm
Ruby 1.9.3-p374 リリース

ruby-lang.org 17 Jan '13, 8am

<URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p374.tar.bz2> SIZE: 10017658 bytes MD5: 944e73eba9ee9e1f2647ff32ec0b14b2 SHA256: 712944f691b79f22f655547826400c26b13bc8c9e7bdc73a4abea45d5e766d85 <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p374.tar.gz> SIZE: 12555429 bytes...
Related:
1. Ruby 1.9.3-p374 is released ruby-lang.org 17 Jan '13, 8am
2. Ruby Singletons and Threads rubyflow.com 17 Jan '13, 3am
3. [ruby-list:49138] [ANN] Ruby 1.9.3 patchlevel 374 blade.nagaokaut.ac.jp 17 Jan '13, 8am
4. 企業向けiPhone、Ruby on Rails開発のプライベートレッスンならEY-Office ey-office.com 16 Jan '13, 2am
5. Developer contractjob.net 17 Jan '13, 12am
6. Developer contractjob.net 16 Jan '13, 8am
Ruby 1.9.3-p374 is released

ruby-lang.org 17 Jan '13, 8am

Now Ruby 1.9.3-p374 is released. This release includes many bug fixes. Especially, Fixed randomly SEGV problem (often reported with Rails) Windows 8 support (maybe, hopefully) other many bug fixes. See tickets and ChangeLog for details. Any secury fixes are not included in this releas...
Related:
1. [ruby-list:49138] [ANN] Ruby 1.9.3 patchlevel 374 blade.nagaokaut.ac.jp 17 Jan '13, 8am
2. Attack Code, Metasploit Module Released For Serious Ruby On Rails Bugs - Da... darkreading.com 16 Jan '13, 12am
3. 128 - January 17, 2013 rubyweekly.com 17 Jan '13, 5pm
4. Ruby Singletons and Threads rubyflow.com 17 Jan '13, 3am
5. Ruby 1.9.3-p374 リリース ruby-lang.org 17 Jan '13, 8am
6. Ruby on Rails 3.2.11 Released to Address 2 “Extremely Critical” Vulnerabili... news.softpedia.com 09 Jan '13, 10am
7. [ANN] ruby 2.0.0-rc1 released ruby-forum.com 07 Jan '13, 4pm
8. Attack Code, Metasploit Module Released For Serious Ruby On Rails Bugs - Da... darkreading.com 10 Jan '13, 9pm
Rational - Rubyリファレンスマニュアル

ruby-lang.org 07 Jan '13, 7am

self を other で割った、商と余りの配列を返します。商は Fixnum、余りは絶対値が other の絶対値を越えず、符合が other と同じ Numeric です。Numeric#divmod も参照して下さい。 Rational(3,4).divmod(Rational(2,3)) # => [1, Rational(1, 12)] Rational(-3,4).divmod(Rational(2,3)) # => [-2, Rational(7, 12)] Rational(3,4).divmod(Rational(-2,3)) # => [-...
Ruby 1.9.3-p362 リリース

ruby-lang.org 29 Dec '12, 9am

<URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p362.tar.bz2> SIZE: 10021565 bytes MD5: 13c26ea368d88a560f07cc8c5eb4fa05 SHA256: 9ed456711a4c0fb2969d9144a81a706d2d506070a35a6d5bc98bb5c8407f9985 <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p362.tar.gz> SIZE: 12565596 bytes...
Related:
1. Ruby 1.9.3-p362 リリース ruby-lang.org 25 Dec '12, 4pm
2. Ruby/ Ruby on Rails Developer (PostgreSQL, Agile)-Finance Job in London, Lo... jobview.monster.co.uk 29 Dec '12, 10am
3. Essential Ruby & Rails - Skillshare skillshare.com 29 Dec '12, 2pm
4. Developer (PostgreSQL, Agile)-Finance technojobs.co.uk 29 Dec '12, 10am
5. ZeroMQ and Ruby a Practical Example rubyflow.com 28 Dec '12, 2pm
6. Hotel reveal deal website in Ruby on Rails | AJAX | HTML5 | Ruby & Ruby on ... freelancer.com 30 Dec '12, 4am
7. Ruby on Rails - Jiffle — HasGeek Job Board jobs.hasgeek.com 28 Dec '12, 10am
8. Ruby on Rails specialist needed for website development | Graphic Design | ... freelancer.com 28 Dec '12, 9am
Ruby 1.9.3-p362 is released

ruby-lang.org 25 Dec '12, 4pm

According to this time, as usual, Ruby 1.9.3-p362 is released. This release includes other many bug fixes. Resolved build problems on Solaris. Windows 8 support (hopefully). other many bug fixes. See ticktes and ChangeLog for details. In addition, any secury fixes are not included in ...
Related:
1. lua-mruby Released rubyflow.com 24 Dec '12, 12pm
2. Ruby 1.9.3-p362 リリース ruby-lang.org 25 Dec '12, 4pm
3. [ANN] ruby 2.0.0-rc1 released ruby-forum.com 07 Jan '13, 4pm
4. Ruby wrapper for xxHash lib rubyflow.com 22 Dec '12, 9pm
5. on Rails Console with Associations stackoverflow.com 26 Dec '12, 12am
6. Ruby and Rails PDF Book ( 10.68 MB ) asaha.com 25 Dec '12, 7am
7. [CDI] Développeur ruby on rails anglophone at OFFSHORE ACADEMY | e-jobby.com e-jobby.com 25 Dec '12, 4pm
8. Ruby on Rails: Core rubyonrails.org 26 Dec '12, 12pm
Ruby 1.9.3-p362 リリース

ruby-lang.org 25 Dec '12, 4pm

毎年恒例ですが、今年もクリスマスに合わせて Ruby 1.9.3-p362 がリリースされました。このリリースでは、以下の修正が取り込まれています。 Solaris におけるビルドの問題の修正 Windows 8 対応 (たぶん) その他多数のバグ修正詳しくは、対応するチケットおよび ChangeLog を確認して下さい。なお、今回のリリースには、脆弱性対応は特に含まれていません。ダウンロード以下の URL から本リリースをダウンロードできます。 <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3...
Related:
1. Ruby 1.9.3-p362 リリース ruby-lang.org 29 Dec '12, 9am
2. Ruby 1.9.3-p362 is released ruby-lang.org 25 Dec '12, 4pm
2013 Fukuoka Ruby Award Competition—Entries to be judged by Matz

ruby-lang.org 16 Nov '12, 10pm

2013 Fukuoka Ruby Award Competition—Entries to be judged by Matz Dear Ruby Enthusiasts, The Government of Fukuoka, Japan, together with "Matz" Matsumoto, would like to invite you to enter the 2013 Fukuoka Ruby Competition. If you have developed Ruby programs within the past 12 months,...
2012 Fukuoka Ruby Award Competition with Matz - Grand Prize, 1,000,000JPY!

ruby-lang.org 10 Nov '12, 4am

2012 Fukuoka Ruby Award Competition with Matz - Grand Prize, 1,000,000JPY! Dear Ruby Enthusiasts, The Government of Fukuoka, Japan together with the creator of Ruby, "Matz" Matsumoto would like to invite you to enter the following Ruby competitions. If you have developed an interestin...
ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371)

ruby-lang.org 09 Nov '12, 11pm

Content available in English , French , Japanese , Korean , Polish , Spanish , Portuguese , Simplified Chinese , Traditional Chinese , Bahasa Indonesia , German , Italian , Czech , Bulgarian and Turkish . このサイトはRubyとRadiant CMS によって構築されています。また、コンテンツはRubyコミュニティによって管理されています。質問やコメントは w...
Related:
1. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 9pm
2. Hash-flooding DoS vulnerability for ruby 1.9 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 8pm
3. Ruby 1.9.3-p327 リリース ruby-lang.org 09 Nov '12, 10pm
4. Ruby 1.9.3-p327 is released ruby-lang.org 09 Nov '12, 8pm
Ruby 1.9.3-p327 リリース

ruby-lang.org 09 Nov '12, 10pm

Ruby 1.9.3-p327 がリリースされました。このリリースには、脆弱性対応を含む以下の修正が取り込まれています。 ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性への対応 (CVE-2012-5371) その他多数のバグ修正詳しくは、対応するチケットおよび ChangeLog を確認して下さい。ダウンロード以下の URL から本リリースをダウンロードできます。 <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p327.tar.bz2> SIZE: 9975835 bytes...
Related:
1. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 9pm
2. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 11pm
3. Ruby 1.9.3-p327 is released ruby-lang.org 09 Nov '12, 8pm
4. Hash-flooding DoS vulnerability for ruby 1.9 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 8pm
5. Ruby Under a Microscope - Pat Shaughnessy patshaughnessy.net 09 Nov '12, 7pm
6. Ruby on Rails разработчик — ХАНТИМ hantim.ru 09 Nov '12, 3pm
7. Ruby Dev Tools | Learn Ruby - Learnstreet learnstreet.com 09 Nov '12, 5am
8. Ruby on Rails Programmer Needed ASAP | Javascript | Ruby & Ruby on Rails freelancer.com 11 Nov '12, 2am
ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371)

ruby-lang.org 09 Nov '12, 9pm

Content available in English , French , Japanese , Korean , Polish , Spanish , Portuguese , Simplified Chinese , Traditional Chinese , Bahasa Indonesia , German , Italian , Czech , Bulgarian and Turkish . このサイトはRubyとRadiant CMS によって構築されています。また、コンテンツはRubyコミュニティによって管理されています。質問やコメントは w...
Related:
1. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 11pm
2. Hash-flooding DoS vulnerability for ruby 1.9 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 8pm
3. Ruby 1.9.3-p327 リリース ruby-lang.org 09 Nov '12, 10pm
4. Ruby 1.9.3-p327 is released ruby-lang.org 09 Nov '12, 8pm
Ruby 1.9.3-p327 is released

ruby-lang.org 09 Nov '12, 8pm

Ruby 1.9.3-p327 is released. This release includes some security fixes, and many other bug fixes. Hash-flooding DoS vulnerability for ruby 1.9 many other bug fixes. See tickets and ChangeLog for details. Download <URL:ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p327.tar.bz2> SIZE:...
Related:
1. 3.2.9.rc3 has been released! weblog.rubyonrails.org 09 Nov '12, 6pm
2. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 9pm
3. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 11pm
4. Ruby 1.9.3-p327 リリース ruby-lang.org 09 Nov '12, 10pm
5. Hash-flooding DoS vulnerability for ruby 1.9 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 8pm
6. Beanstalkd and Job Queues in Ruby rubyflow.com 07 Nov '12, 10pm
7. Making RABL and your Ruby APIs Fast rubyflow.com 11 Nov '12, 1am
8. Ruby on Rails разработчик — ХАНТИМ hantim.ru 09 Nov '12, 3pm
Hash-flooding DoS vulnerability for ruby 1.9 (CVE-2012-5371)

ruby-lang.org 09 Nov '12, 8pm

Hash-flooding DoS attack reported for the Hash function ruby 1.9 series were using. This vulnerability is different from CVS-2011-4815 for ruby 1.8.7. All ruby 1.9 users are recommended to upgrade to ruby-1.9.3 patchlevel 327 to get this security fix. Impact Carefully crafted sequence...
Related:
1. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 9pm
2. ruby 1.9 におけるハッシュ飽和攻撃による DoS 脆弱性 (CVE-2012-5371) ruby-lang.org 09 Nov '12, 11pm
3. Ruby 1.9.3-p327 is released ruby-lang.org 09 Nov '12, 8pm
4. Ruby 1.9.3-p327 リリース ruby-lang.org 09 Nov '12, 10pm
不当な NUL 文字挿入によって意図しないファイルが生成されうる脆弱性について

ruby-lang.org 12 Oct '12, 9pm

p File.exists?("foo") #=> false open("foo\0bar", "w") { |f| f.puts "hai" } p File.exists?("foo") #=> true p File.exists?("foo\0bar") #=> raises ArgumentError
Ruby 1.9.3-p286 リリース

ruby-lang.org 12 Oct '12, 2pm

Ruby 1.9.3-p286 がリリースされました。このリリースには、脆弱性対応を含む以下の修正が取り込まれています。 Exception#to_s 等による $SAFE 機構をバイパス可能な脆弱性の対応 (CVE-2012-4464, CVE-2012-4466) 不当な NUL 文字挿入によって意図しないファイルが生成されうる脆弱性の対応その他多数のバグ修正詳しくは、対応するチケットおよび ChangeLog を確認して下さい。ダウンロード以下の URL から本リリースをダウンロードできます。 <URL:ftp://ftp.ruby-lang....
Related:
1. Ruby 1.9.3-p286 is released ruby-lang.org 12 Oct '12, 11am
2. Fun with Unicode Math in Ruby rubyflow.com 11 Oct '12, 7pm
3. Ruby Tidbit: Super and Parameter Reassignment rubyflow.com 12 Oct '12, 12am
4. Rails Girls Philippines: Learn Ruby & Ruby on Rails - SGE : SGE sgentrepreneurs.com 11 Oct '12, 9pm
5. Floqq - Iniciación a Ruby on Rails 3.2 floqq.com 11 Oct '12, 1pm
6. Install, setup and configure Ruby and Script | HTML | Ruby & Ruby on Rails freelancer.com 13 Oct '12, 7pm

ruby-lang.org Archives - 22 February 2013, Friday

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related:

Related: