Cillad halis ah oo Rails ah ayaa faylal bannaanka soo dhigi karta

Sida ay soo warisay The Hacker News, Ruby on Rails ayaa soo saartay dayactir loogu talagalay cillad halis ah oo ku jirta Active Storage, taas oo u oggolaan karta weeraryahanno aan la xaqiijin inay akhriyaan fayl kasta oo ku jira server-rada codsiyada, iyagoo gelinaya sawirro si gaar ah loo farsameeyey. Cilladdan waxaa loo diiwaangeliyey CVE-2026-66066. Ka faa’iidaysigeeda ayaa bannaanka soo dhigi kara deegaanka uu Rails ku shaqeeyo iyo siraha ay ka mid yihiin secret_key_base, furaha master-ka Rails, furayaasha sirta ee kaydka xogta, aqoonsiyada kaydinta daruuraha iyo tokennada API-ga. Sirahaas ayaa suuragelin kara in meel fog laga fuliyo koodh ama loo gudbo nidaamyada kale ee ku xiran. Ethiack iyo GMO Flatt Security ayaa sheegay in noocyada ay cilladdu saamayso ay yihiin Rails 7.0.0 ilaa 7.2.3.1, Rails 8.0.0 ilaa 8.0.5 iyo Rails 8.1.0 ilaa 8.1.3. Cilladdu waxay saamaysaa noocyada Rails 6.0.0 ilaa 6.1.7.10 oo keliya marka Active Storage loo habeeyey inuu isticmaalo Vips, kaas oo aan ahayn processor-ka caadiga ah ee Rails 6. Tani waa arrin muhiim u ah akhristayaasha Soomaaliyeed: maamulayaasha adeegyada ku shaqeeya noocyadan Rails waa inay si degdeg ah u hirgeliyaan dayactirka si ay u ilaaliyaan siraha server-ka iyo nidaamyada ku xiran.

Akhri habraaca ilaha iyo saxitaanada

Warar la xiriira

Cilad Coldcard ah oo lala xiriiriyay xatooyo $70 milyan ah

Akhriso ➔

Rails ayaa sixday nuglaansho halis ah oo ku jirta Active Storage

Akhriso ➔

Adobe ayaa xallisay cilad halis ah oo ku jirtay Campaign Classic

Akhriso ➔