Cillad Halis ah oo Rails ah ayaa Faylal Bandhigi Karta

Ruby on Rails waxay soo saartay dayactir cillad halis ah oo ku jirta Active Storage, taas oo u oggolaan karta weeraryahanno aan la xaqiijin inay akhriyaan faylal kasta oo ku jira server-rada codsiyada iyagoo gelinaya sawirro si gaar ah loo farsameeyey. Cilladdan, oo loo diiwaangeliyey CVE-2026-66066, waxay leedahay dhibcaha CVSS ee 9.5. Ka faa’iidaysigeedu wuxuu bannaanka soo dhigi karaa deegaanka hawlgalka Rails iyo siraha ay ka mid yihiin secret_key_base, furaha master-ka Rails, furayaasha sirta ee kaydka xogta, aqoonsiyada kaydinta daruuraha iyo tokennada API-ga. Sirahaas ayaa suuragelin kara fulinta kood meel fog ama u gudbidda nidaamyada kale ee ku xiran. Ethiack iyo GMO Flatt Security waxay sheegeen in noocyada ay cilladdu saamayso ay yihiin Rails 7.0.0 ilaa 7.2.3.1, Rails 8.0.0 ilaa 8.0.5, iyo Rails 8.1.0 ilaa 8.1.3. Noocyada Rails 6.0.0 ilaa 6.1.7.10 waxay saamaynayaan oo keliya marka Active Storage loo habeeyey inay isticmaasho Vips, kaas oo aan ahayn processor-ka caadiga ah ee Rails 6. Waxay tani muhiim u tahay akhristayaasha Soomaaliyeed: Maamulayaasha adeegyada adeegsada noocyadan Rails waa inay si degdeg ah u dabaqaan dayactirka si ay u ilaaliyaan siraha server-ka iyo nidaamyada ku xiran.

Akhri habraaca ilaha iyo saxitaannada

Warar la xiriira

GitHub iyo PyPI oo soo kordhiyay difaac ka dhan ah weerarada software-ka

Akhriso ➔

Shirkadda OnTrac oo macaamiisheeda u digtay kadib xogteeda oo la jabsaday

Akhriso ➔

Jabsadayaasha oo Adeegsanaya Wi-Fi-ga Huteelada si ay u Xadaan Xisaabaadka Microsoft

Akhriso ➔