すぎむし。

On Fri, 03 Nov 2006 14:15 JST, M.Suzuki wrote:

すばやい対処ごくろうさまです。が、一箇所「、」が残っていました。

遅いですが、自分ならこのように(だいぶ言い換えてますが)。

= On DoS vulonerability in ruby's CGI library

A recently found vulnerability CVE-... has been on public;
ruby's standard CGI library cgi.rb might cause DoS (Denial of
Service) state on the CGI service concerened, without great
difficulty.

Following workaround is available for affected cgi.rb users.

== Versions concerned

: 1.8 series
  All versions before 1.8.5.

: 1.9 series (development branch)
  All versions before 2006-09-23.

== Best action

Update ruby.

: For 1.8 series: 

Apply this patch [link] to ruby 1.8.5 (upgrade ruby if needed).
Its size is 367 bytes, and md5sum is 9d...

Probably the venders who are packaging ruby will undertake
measures against the vulnerability along this way.
For details / updated packages, please contact to each vendor.

: For 1.9 series (development branch): 

Update to the version later than 2006-09-23.

-- 
SugHimsi == SUGIHARA Hiroshi
maili31s at CLIO-Net


--
ML: ruby@m...
使い方: http://QuickML.com/