Google Code Archive - Long-term storage for Google Code Project Hosting.Code Archive Skip to content Google About Google Privacy Terms
Matzã«ã£ã(2008-08-29)
<< 2008/08/ 1 2 3 4 1. å¸°çœ 2. èªè€…プレゼント 5 1. [æ˜ ç”»] アイ・アム・レジェンド 6 1. å¤ä¼‘ã¿ 2. å±±å£ã¡ã‚‡ã†ã¡ã‚“ç¥ 7 1. æ¾æ±Ÿå¸°é‚„ 2. èªè€…プレゼントå—付 3. 瀕æ»ã®Prius 8 1. [Ruby] Rubyåˆå®¿ 2. 当é¸ç™ºè¡¨ 9 1. [æ˜ ç”»] ã©ã‚ã‚ 10 11 12 13 14 15 16 17 18 1. 出発準備 2. フィード削減 3. 妻ã®ãƒ–ãƒã‚° 19 1. æ±äº¬ 20 1. 三鷹ジブリã®æ£®ç¾Žè¡“館 2. Ruby Academy開講記念セミナー 21 1. U20プãƒã‚³ãƒ³å¯©æŸ»å§”員会 22 23 24 25 26 1. èˆªç©ºåˆ¸æ‰‹é… 2. [言語]シーケンス述語 3. [言語] Lisp, the Universe and Everything: Re: An Acceptable Lisp 4. ãŽã£ã¨ 27 1. e-T
REXMLã®DoS脆弱性
Posted by Shugo Maeda on 23 Aug 2008 Rubyã®æ¨™æº–ライブラリã«å«ã¾ã‚Œã¦ã„ã‚‹REXMLã«ã€DoS脆弱性ãŒç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ XML entity explosion attackã¨å‘¼ã°ã‚Œã‚‹æ”»æ’ƒæ‰‹æ³•ã«ã‚ˆã‚Šã€ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ä¸Žãˆã‚‰ã‚Œ ãŸXMLを解æžã™ã‚‹ã‚ˆã†ãªã‚¢ãƒ—リケーションをサービスä¸èƒ½(DoS)状態ã«ã™ã‚‹ã“㨠ãŒã§ãã¾ã™ã€‚ Railsã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®çŠ¶æ…‹ã§ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ä¸Žãˆã‚‰ã‚ŒãŸXMLを解æžã™ã‚‹ãŸã‚ã€å¤§éƒ¨åˆ†ã® Railsアプリケーションã¯ã“ã®æ”»æ’ƒã«å¯¾ã—ã¦è„†å¼±ã§ã™ã€‚ 影響 攻撃者ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ã«å†å¸°çš„ã«ãƒã‚¹ãƒˆã—ãŸå®Ÿä½“å‚照をå«ã‚€XML文書をREXML㫠解æžã•ã›ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ã‚µãƒ¼ãƒ“スä¸èƒ½(DoS)状態を引ãèµ·ã“ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE member [ <!ENTITY a "&b;
The DNS Vulnerability - Schneier on Security
The DNS Vulnerability Despite the best efforts of the security community, the details of a critical internet vulnerability discovered by Dan Kaminsky about six months ago have leaked. Hackers are racing to produce exploit code, and network operators who haven’t already patched the hole are scrambling to catch up. The whole mess is a good illustration of the problems with researching and disclosing
mizzy.org : mod_dosdetector ã‚’ Apache 2.0 ç³»ã§å‹•ã‹ã™ãƒ‘ッãƒ
mod_dosdetecter 0.2 ã‚’ Apache 2.0 ç³»ã§å‹•ã‹ã™ãƒ‘ッãƒã‚’書ã„ã¦ã¿ãŸã€‚ä¿®æ£ãƒã‚¤ãƒ³ãƒˆã¯ã€ /usr/local/apache/include/pcreposix.h:41: error: redeclaration of enumerator `REG_BADBR’ ã¨ã„ã£ãŸã‚¨ãƒ©ãƒ¼ãŒå¤§é‡ã«å‡ºã¦ãã‚‹ãŒã€ã“れ㯠/usr/include/regex.h ã¨å®£è¨€ãŒé‡è¤‡ã—ã¦ã„ã‚‹ãŸã‚。ãªã®ã§ã€#include <regex.h> ã¯å‰Šé™¤ã€‚ ap_regmatch_t æ§‹é€ ä½“ã¨ ap_regex_t æ§‹é€ ä½“ã¯ 2.2 ç³»ã«ã®ã¿å˜åœ¨ã—ã€2.0 ç³»ã«ã¯å˜åœ¨ã—ãªã„。ãªã®ã§ãã‚Œãžã‚Œã€regmatch_t, regex_t ã«ç½®ãæ›ãˆã‚‹ã€‚ apr_shm_remove 㯠2.2ç³» ã§ã—ã‹ä½¿ãˆãªã„ã®ã§ã€ãã®ãŸã‚ã®ä¿®æ£ã‚’ mod_fcgid ã®ã‚½ãƒ¼ã‚¹ ã‹ã‚‰ãƒ‘クる。 set_ignore_c
Improving the Ruby GC - LloydForge
Improving the Ruby GC overview This page details some changes to the ruby garbage collector which seem to afford a 25% reduction in maximum heap memory usage, and nearly double the amount of heap space ruby's is able to reclaim. This comes at the cost of a 2% performance hit. More to come, stay tuned. patch The latest patch to ruby 1.8.6 is available here. summary of changes Fixed 2k heaps Hea
Logic-Junction : Products : Rubend
RubyEnd æ¦‚è¦ RubyEnd ã¯ã€Ruby ã«å¯¾ã—㦠"end" ã®å¯¾å¿œä»˜ã‘ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹æ©Ÿèƒ½ã‚’è¿½åŠ ã™ã‚‹ãƒ‘ッãƒã§ã™ã€‚ ã“ã®ãƒ‘ッãƒã‚’使ã†ã¨ã€"def" ã‚„ "for" ãªã©ã®äºˆç´„語ã¨ã€"end" ã¨ã®å¯¾å¿œã‚’調ã¹ã€ 両者ã®ã‚¤ãƒ³ãƒ‡ãƒ³ãƒˆãŒæƒã£ã¦ãªã„ã¨ãã«è¦å‘Šã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ダウンãƒãƒ¼ãƒ‰ Download (rubyend-0.1.0.tar.gz) インストール rubyend-*.tar.gz を解å‡ã—ã€ä¸ã® "patch.diff" ã‚’ Ruby ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã«é©ç”¨ã—ã¾ã™ã€‚ ãã®ã‚ã¨ã¯é€šå¸¸ã¨åŒã˜æ‰‹é †ã§ Ruby をコンパイルã—ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ãã ã•ã„。 ãªãŠ RubyEnd 㯠parse.y ã¸ã®ãƒ‘ッãƒã®ãŸã‚ã€ã‚³ãƒ³ãƒ‘イルã«ã¯ yacc ã¾ãŸã¯ bison ãŒå¿…è¦ã§ã™ã€‚ ã¾ãŸãƒ‘ッãƒã¯ Ruby 1.8.5 ã§ä½œæˆã—ã¦ã„ã¾ã™ãŒã€Ruby 1.8 ç³»ãªã‚‰å¤§ä¸ˆå¤«ã§ã—ょ
Postfix VDA
These are only the options available in our VDA patch. Look into the Postfix documentation to see how to setup Postfix to use virtual transport. If you use other transport than virtual, this patch is not for you. # Basic map of the maildir/mailbox quotas # Default: not set virtual_mailbox_limit_maps = hash:/etc/postfix/vquota # Limit only inbox or whole maildir? # Default: no virtual_mailbox_limit
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Worldwide Browser Patch Rates - Schneier on Security
Google Code Archive - Long-term storage for Google Code Project Hosting.
Google Code Archive - Long-term storage for Google Code Project Hosting.
{{#tags}}- {{label}}
{{/tags}}