{"id":35479,"date":"2016-01-26T23:48:15","date_gmt":"2016-01-26T14:48:15","guid":{"rendered":"http:\/\/www.softantenna.com\/wp\/?p=35479"},"modified":"2016-01-26T23:48:15","modified_gmt":"2016-01-26T14:48:15","slug":"rails-4-2-5-1-released","status":"publish","type":"post","link":"https:\/\/softantenna.com\/blog\/rails-4-2-5-1-released\/","title":{"rendered":"\u300cRails 5.0.0.beta1.1 \/ 4.2.5.1 \/ 4.1.14.1 \/ 3.2.22.1\u300d\u304c\u30ea\u30ea\u30fc\u30b9 - \u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u3092\u542b\u3080"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/softantenna.com\/blog\/wp-content\/uploads\/2016\/01\/Irails.jpg\" alt=\"Rails\" title=\"rails.jpg\" border=\"0\" width=\"545\" height=\"295\" \/><\/p>\n<p>Rails\u958b\u767a\u30c1\u30fc\u30e0\u306f1\u670825\u65e5(\u73fe\u5730\u6642\u9593)\u3001Rails\u306e\u5404\u7cfb\u5217\u306e\u6700\u65b0\u7248\u300cRails 5.0.0.beta1.1 \/ 4.2.5.1 \/ 4.1.14.1 \/ 3.2.22.1\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f(<a href=\"http:\/\/weblog.rubyonrails.org\/2016\/1\/25\/Rails-5-0-0-beta1-1-4-2-5-1-4-1-14-1-3-2-22-1-and-rails-html-sanitizer-1-0-3-have-been-released\/\">\u516c\u5f0f\u30d6\u30ed\u30b0<\/a>)\u3002\u3053\u308c\u3089\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306f\u4ee5\u4e0b\u306e\u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u3092\u542b\u307f\u3001\u53ef\u80fd\u306a\u9650\u308a\u65e9\u6025\u306b\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7\u3059\u308b\u3053\u3068\u304c\u63a8\u5968\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/ANv0HDHEC3k\/mt7wNGxbFQAJ\">CVE-2015-7576 Timing attack vulnerability in basic authentication in Action Controller.<\/a><\/li>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/9oLY_FCzvoc\/w9oI9XxbFQAJ\">CVE-2016-0751 Possible Object Leak and Denial of Service attack in Action Pack<\/a><\/li>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/cawsWcQ6c8g\/tegZtYdbFQAJ\">CVE-2015-7577 Nested attributes rejection proc bypass in Active Record.<\/a><\/li>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/335P1DcLG00\/OfB9_LhbFQAJ\">CVE-2016-0752 Possible Information Leak Vulnerability in Action View<\/a><\/li>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/6jQVC1geukQ\/8oYETcxbFQAJ\">CVE-2016-0753 Possible Input Validation Circumvention in Active Model<\/a><\/li>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/dthJ5wL69JE\/YzPnFelbFQAJ\">CVE-2015-7581 Object leak vulnerability for wildcard controller routes in Action Pack<\/a><\/li>\n<\/ul>\n<p>\u540c\u6642\u306brails-html-sanitizer 1.0.3\u3082\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u3066\u3044\u3066\u3053\u3061\u3089\u306f\u4ee5\u4e0b\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/uh--W4TDwmI\/JbvSRpdbFQAJ\">CVE-2015-7578 Possible XSS vulnerability in rails-html-sanitizer<\/a><\/li>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/OU9ugTZcbjc\/PjEP46pbFQAJ\">CVE-2015-7579 XSS vulnerability in rails-html-sanitizer<\/a><\/li>\n<li><a href=\"https:\/\/groups.google.com\/d\/msg\/rubyonrails-security\/uh--W4TDwmI\/m_CVZtdbFQAJ\">CVE-2015-7580 Possible XSS vulnerability in rails-html-sanitizer<\/a><\/li>\n<\/ul>\n<p>\u4fee\u6b63\u5f8c\u3001Rails 4.2\u3067\u306fHTML sanitizer\u306e\u30d5\u30a3\u30eb\u30bf\u30fc\u304c\u3088\u308a\u53b3\u683c\u5316\u3055\u308c\u308b\u305f\u3081\u3001\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u5f8c\u306b\u52d5\u4f5c\u78ba\u8a8d\u3092\u884c\u3044\u3001\u52d5\u4f5c\u3057\u306a\u3044\u5834\u5408\u306fwhitelist\u306b\u8a31\u5bb9\u3059\u308b\u30bf\u30b0\u3092\u8ffd\u52a0\u3059\u308b\u3088\u3046\u6ce8\u610f\u304c\u884c\u308f\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Rails\u958b\u767a\u30c1\u30fc\u30e0\u306f1\u670825\u65e5(\u73fe\u5730\u6642\u9593)\u3001Rails\u306e\u5404\u7cfb\u5217\u306e\u6700\u65b0\u7248\u300cRails 5.0.0.beta1.1 \/ 4.2.5.1 \/ 4.1.14.1 \/ 3.2.22.1\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f(\u516c\u5f0f\u30d6\u30ed\u30b0)\u3002\u3053\u308c\u3089\u306e [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":35478,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[75,3385],"tags":[350],"class_list":["post-35479","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software","category-3385","tag-rails"],"_links":{"self":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/35479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/comments?post=35479"}],"version-history":[{"count":0,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/35479\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media\/35478"}],"wp:attachment":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media?parent=35479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/categories?post=35479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/tags?post=35479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}