ืงืขืจืขืงืืืื ืจืืืืกืื ืคืื ืื Ruby ืคึผืจืึธืืจืึทืืืื ื ืฉืคึผืจืึทื ืืขื ืขื ืืืฉืขื ืขืจืืืืึทื , ะธ , ืืืึธืก ืคืึทืจืคืขืกืืืงื ืคืืจ ืืืึทืื ืขืจืึทืืืืืืื. ืื ืืขืจืกื ืืขืคืขืจืืขื ืืืึทืื ืขืจืึทืืืืืื (CVE-2019-16255) ืืื ืืขืจ ื ืึธืจืืึทื ืืืืืืึธืืขืง (lib/shell.rb), ืืืึธืก ืืืจืืคืืจื ืงืึธื ืกืึทืืกืืืืืฉืึทื. ืืืื ืืึทืื ืืืงืืืขื ืคืื ืืขืจ ืืึทื ืืฆืขืจ ืืขื ืขื ืคึผืจืึทืกืขืกื ืืื ืืขืจ ืขืจืฉืืขืจ ืึทืจืืืืขื ื ืคืื ืื Shell#[] ืึธืืขืจ Shell# ืืขืกื ืืขืืืึธืืก ืืขื ืืฆื ืฆื ืงืึธื ืืจืึธืืืจื ืืขื ืืืึทืืืึทื ืคืื ืึท ืืขืงืข, ืึท ืึทืืึทืงืขืจ ืงืขื ืขื ืึธื ืืึทืื ืึท ืึทืจืืืืจืึทืจืืฉ ืจืืื ืืืคึฟื.
ืื ืืขืจืข ืคืจืืืืขืืขื:
- - ืืืกืฉืืขืื ืฆื ืื ืืขืืืื-ืืื ืืืืคึผ ืกืขืจืืืขืจ ืืืืคึผ ืขื ืืคืขืจ ืกืคึผืืืืื ื ืืึทืคืึทืื (ืืืื ืึท ืคึผืจืึธืืจืึทื ืื ืกืขืจืฅ ืึทื ืืืขืจืึทืคืืื ืืึทืื ืืื ืื ืืืืคึผ ืขื ืืคืขืจ ืืขืืขืจ, ืื ืืขืืขืจ ืงืขื ืขื ืืืื ืฉืคึผืึทืืื ืืืจื ืื ืกืขืจืืื ื ืึท ื ืขืืืืืื ืืึทืจืึทืงืืขืจ);
- ืกืึทืืกืืืืืฉืึทื ืคืื ืื ื ืึทื ืืึทืจืึทืงืืขืจ (\0) ืืื ืื ืึธืคึผืืขืฉืืขืื ืืืจื ืื "File.fnmatch" ืืื "File.fnmatch?" ืืขืืืึธืืก. ืืขืงืข ืคึผืึทืืก ืงืขื ืขื ืืืขืจื ืืขื ืืฆื ืฆื ืคืึทืืฉ ืฆืื ืื ืื ืืฉืขืง;
- - ืึธืคึผืืืืงืขื ืื ื ืคืื ืืื ืกื ืืื ืื ืืืืขืก ืึธืืขื ืืึทืงืืืฉืึทื ืืึธืืืืข ืคึฟืึทืจ WEBrick.
ืืงืืจ: opennet.ru