Ruby 3.0.1 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืžื™ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜

ืงืขืจืขืงื˜ื™ื•ื• ืจื™ืœื™ืกื™ื– ืคื•ืŸ ื“ื™ Ruby ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืฉืคึผืจืึทืš 3.0.1, 2.7.3, 2.6.7 ืื•ืŸ 2.5.9 ื–ืขื ืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“, ืื™ืŸ ื•ื•ืึธืก ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“:

  • CVE-2021-28965 ืื™ื– ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ืจืขืงืกืžืœ ืžืึธื“ื•ืœืข, ื•ื•ืึธืก, ื•ื•ืขืŸ ืคึผืึทืจืกื™ื ื’ ืื•ืŸ ืกื™ืจื™ืึทืœื™ื–ื™ื ื’ ืึท ืกืคึผืขืฆื™ืขืœ ืคืึธืจืžืึทื˜ื˜ืขื“ ืงืกืžืœ ื“ืึธืงื•ืžืขื ื˜, ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ื“ืขืจ ืฉืึทืคื•ื ื’ ืคื•ืŸ ืึท ืคืึทืœืฉ ืงืกืžืœ ื“ืึธืงื•ืžืขื ื˜ ื•ื•ืขืžืขื ืก ืกื˜ืจื•ืงื˜ื•ืจ ืื™ื– ื ื™ืฉื˜ ืคึผืึทืกื™ืง ืคึฟืึทืจ ื“ืขืจ ืึธืจื™ื’ื™ื ืขืœ. ื“ื™ ืฉื˜ืจืขื ื’ืงื™ื™ึทื˜ ืคื•ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื“ืขืคึผืขื ื“ืก ืฉื•ื•ืขืจ ืื•ื™ืฃ ื“ืขื ืงืึธื ื˜ืขืงืกื˜, ืึธื‘ืขืจ ืึทื˜ืึทืงืก ืงืขื’ืŸ ืขื˜ืœืขื›ืข ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื•ื•ืึธืก ื ื•ืฆืŸ REXML ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืจื•ืœื“ ืื•ื™ืก.
  • CVE-2021-28966 ืื™ื– ืึท Windows-ืคึผืœืึทื˜ืคืึธืจืžืข-ืกืคึผืขืฆื™ืคื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื•ื•ืึธืก ืึทืœืึทื•ื– ื“ื™ ืฉืึทืคื•ื ื’ ืคื•ืŸ ืึท ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืึธื“ืขืจ ื˜ืขืงืข ืื™ืŸ ืคึผืึทืจืฅ ืคื•ืŸ ื“ืขืจ ื˜ืขืงืข ืกื™ืกื˜ืขื ื•ื•ืึธืก ื–ืขื ืขืŸ ืจื™ื™ื˜ืึทื‘ืึทืœ ื“ื•ืจืš ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืžื™ื˜ ื•ื•ืขืžืขื ืก ืจืขื›ื˜ ื“ื™ ืจื•ื‘ื™ ืคึผืจืึธืฆืขืก ืื™ื– ืคืœื™ืกื ื“ื™ืง. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื“ื™ ืคึผืจืขืคื™ืงืก ืื™ืŸ ื“ื™ Dir.mktmpdir ืื•ืคึฟืŸ, ื•ื•ืึธืก ื˜ื•ื˜ ื ื™ืฉื˜ ื•ื™ืกืฉืœื™ืกืŸ ื“ื™ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ ืงืึทื ืกื˜ืจืึทืงืฉืึทื ื– ื•ื•ื™ "..\\". ืฆื• ื‘ืึทืคืึทืœืŸ, ื“ืขืจ ืคึผืจืึธืฆืขืก ืžื•ื–ืŸ ื ื•ืฆืŸ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื“ืึทื˜ืŸ ื•ื•ืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ื™ื ื’ ื“ื™ ืคึผืจืขืคื™ืงืก ื•ื•ืขืจื˜.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’