2018-3-29 21:14| 发布者: joejoe0332| 查看: 312| 评论: 0|原作者: oschina|来自: oschina
Ruby 2.5.1 已正式发布，本次更新包含 bug 修复和安全修复。
CVE-2017-17742: HTTP response splitting in WEBrick
CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir
CVE-2018-8777: DoS by large request in WEBrick
CVE-2018-8778: Buffer under-read in String#unpack
CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket
CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir
Multiple vulnerabilities in RubyGems
关于安全修复的内容， 查看 commit logs 了解具体细节。
下载地址和更新说明请查看：https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-5-1-released/
: 看着牙疼！
关于LUPA|人才芯片工程|人才招聘|LUPA认证|LUPA教育|LUPA开源社区 ( 浙B2-20090187 浙公网安备 33010602006705号 )
