22layout : page
33title : " Безопасность"
44lang : ru
5- translator : " ablzh"
65---
76
87Здесь вы найдёте информацию об уязвимостях Ruby.
@@ -24,6 +23,8 @@ translator: "ablzh"
2423
2524## Известные проблемы
2625
26+ _ Смотрите [ английскую версию страницы] ( /en/security/ ) для получения полного и актуального списка уязвимостей.
27+ Ниже приведен список только переведенных объявлений о безопасности, он может быть неполным или устаревшим._
2728
2829Последние проблемы:
2930
@@ -45,7 +46,7 @@ translator: "ablzh"
4546* [ Unintentional file creation caused by inserting a illegal NUL
4647 character (CVE-2012 -4522)] [ 5 ]
4748 published at 12 Oct, 2012.
48- * [ $SAFE escaping vulnerability about Exception#to \_ s / NameError#to \_ s
49+ * [ $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
4950 (CVE-2012 -4464, CVE-2012 -4466)] [ 6 ]
5051 published at 12 Oct, 2012.
5152* [ Security Fix for RubyGems: SSL server verification failure for remote
@@ -62,14 +63,14 @@ translator: "ablzh"
6263 published at 18 Feb, 2011.
6364* [ XSS in WEBrick (CVE-2010 -0541)] [ 12 ]
6465 published at 16 Aug, 2010.
65- * [ Buffer over-run in ARGF.inplace \_ mode =] [ 13 ]
66+ * [ Buffer over-run in ARGF.inplace_mode =] [ 13 ]
6667 published at 2 Jul, 2010.
6768* [ WEBrick has an Escape Sequence Injection vulnerability (CVE-2009 -4492)] [ 14 ]
6869 published at 10 Jan, 2010.
6970* [ Heap overflow in String (CVE-2009 -4124)] [ 15 ]
7071 published at 7 Dec, 2009.
7172* [ DoS vulnerability in
72- BigDecimal] ( /en/news/2009/06/09/dos-vulnerability-in-bigdecimal/ ( CVE-2009-1904 ) )
73+ BigDecimal] ( /en/news/2009/06/09/dos-vulnerability-in-bigdecimal/ " CVE-2009-1904 " )
7374 published at 9 Jun, 2009.
7475* [ DoS vulnerability (CVE-2008 -3790) in
7576 REXML] ( /en/news/2008/08/23/dos-vulnerability-in-rexml/ )
@@ -95,8 +96,6 @@ translator: "ablzh"
9596 settings] ( /en/news/2005/10/03/ruby-vulnerability-in-the-safe-level-settings/ )
9697 published at 2 Oct, 2005.
9798
98-
99-
10099[ 1 ] : /ru/news/2013/02/22/rexml-dos-2013-02-22/
101100[ 2 ] : /ru/news/2013/02/22/json-dos-cve-2013-0269/
102101[ 3 ] : /ru/news/2013/02/06/rdoc-xss-cve-2013-0256/
0 commit comments