From fc28dfae615ff78b9d372612c1ef9cccba4cec4d Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Fri, 23 Aug 2024 12:05:15 +0900 Subject: [PATCH 01/27] bundle up --bundler --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index b743d2083b..aada939bb3 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -215,4 +215,4 @@ DEPENDENCIES validate-website (~> 1.6) BUNDLED WITH - 2.5.13 + 2.5.17 From 58612d9d8a8d20636c3de94a864c47cee5439e3b Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Fri, 23 Aug 2024 12:05:34 +0900 Subject: [PATCH 02/27] update bundles --- Gemfile.lock | 90 ++++++++++++++++++++++++++-------------------------- 1 file changed, 45 insertions(+), 45 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index aada939bb3..ea21f009ba 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -2,18 +2,18 @@ GEM remote: https://rubygems.org/ specs: Ascii85 (1.1.1) - addressable (2.8.6) - public_suffix (>= 2.0.2, < 6.0) + addressable (2.8.7) + public_suffix (>= 2.0.2, < 7.0) afm (0.2.2) - async (2.12.0) - console (~> 1.25, >= 1.25.2) + async (2.15.3) + console (~> 1.26) fiber-annotation - io-event (~> 1.6) + io-event (~> 1.6, >= 1.6.5) base64 (0.2.0) bigdecimal (3.1.8) colorator (1.1.0) - concurrent-ruby (1.3.3) - console (1.25.2) + concurrent-ruby (1.3.4) + console (1.27.0) fiber-annotation fiber-local (~> 1.1) json @@ -38,24 +38,24 @@ GEM fiber-annotation (0.2.0) fiber-local (1.1.0) fiber-storage - fiber-storage (0.1.2) + fiber-storage (1.0.0) forwardable-extended (2.6.0) - google-protobuf (4.27.1) + google-protobuf (4.27.3) bigdecimal rake (>= 13) - google-protobuf (4.27.1-aarch64-linux) + google-protobuf (4.27.3-aarch64-linux) bigdecimal rake (>= 13) - google-protobuf (4.27.1-arm64-darwin) + google-protobuf (4.27.3-arm64-darwin) bigdecimal rake (>= 13) - google-protobuf (4.27.1-x86-linux) + google-protobuf (4.27.3-x86-linux) bigdecimal rake (>= 13) - google-protobuf (4.27.1-x86_64-darwin) + google-protobuf (4.27.3-x86_64-darwin) bigdecimal rake (>= 13) - google-protobuf (4.27.1-x86_64-linux) + google-protobuf (4.27.3-x86_64-linux) bigdecimal rake (>= 13) hashery (2.1.2) @@ -71,7 +71,7 @@ GEM http_parser.rb (0.8.0) i18n (1.14.5) concurrent-ruby (~> 1.0) - io-event (1.6.4) + io-event (1.6.5) jekyll (4.3.3) addressable (~> 2.4) colorator (~> 1.0) @@ -102,18 +102,18 @@ GEM rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.4.0) - minitest (5.23.1) - nokogiri (1.16.6-aarch64-linux) + minitest (5.25.1) + nokogiri (1.16.7-aarch64-linux) racc (~> 1.4) - nokogiri (1.16.6-arm-linux) + nokogiri (1.16.7-arm-linux) racc (~> 1.4) - nokogiri (1.16.6-arm64-darwin) + nokogiri (1.16.7-arm64-darwin) racc (~> 1.4) - nokogiri (1.16.6-x86-linux) + nokogiri (1.16.7-x86-linux) racc (~> 1.4) - nokogiri (1.16.6-x86_64-darwin) + nokogiri (1.16.7-x86_64-darwin) racc (~> 1.4) - nokogiri (1.16.6-x86_64-linux) + nokogiri (1.16.7-x86_64-linux) racc (~> 1.4) paint (2.3.0) pathutil (0.16.2) @@ -124,8 +124,8 @@ GEM hashery (~> 2.0) ruby-rc4 ttfunk - public_suffix (5.1.0) - racc (1.8.0) + public_suffix (6.0.1) + racc (1.8.1) rainbow (3.1.1) rake (13.2.1) rb-fsevent (0.11.2) @@ -136,26 +136,26 @@ GEM rouge (4.3.0) ruby-rc4 (0.1.5) safe_yaml (1.0.5) - sass-embedded (1.77.5-aarch64-linux-gnu) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-aarch64-linux-musl) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-arm-linux-gnueabihf) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-arm-linux-musleabihf) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-arm64-darwin) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-x86-linux-gnu) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-x86-linux-musl) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-x86_64-darwin) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-x86_64-linux-gnu) - google-protobuf (>= 3.25, < 5.0) - sass-embedded (1.77.5-x86_64-linux-musl) - google-protobuf (>= 3.25, < 5.0) + sass-embedded (1.77.8-aarch64-linux-gnu) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-aarch64-linux-musl) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-arm-linux-gnueabihf) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-arm-linux-musleabihf) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-arm64-darwin) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-x86-linux-gnu) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-x86-linux-musl) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-x86_64-darwin) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-x86_64-linux-gnu) + google-protobuf (~> 4.26) + sass-embedded (1.77.8-x86_64-linux-musl) + google-protobuf (~> 4.26) slop (4.10.1) spidr (0.7.1) nokogiri (~> 1.3) @@ -184,7 +184,7 @@ GEM rexml (~> 3.2) webrick (1.8.1) yell (2.2.2) - zeitwerk (2.6.16) + zeitwerk (2.6.17) PLATFORMS aarch64-linux From 933bab753d114f4ec4751eac9bb81241eb1b6189 Mon Sep 17 00:00:00 2001 From: nagachika Date: Mon, 19 Aug 2024 20:32:04 +0900 Subject: [PATCH 03/27] Removed a CVE link that was added by mistake in ruby-3.2.4 release announces. --- en/news/_posts/2024-04-23-ruby-3-2-4-released.md | 1 - ja/news/_posts/2024-04-23-ruby-3-2-4-released.md | 1 - 2 files changed, 2 deletions(-) diff --git a/en/news/_posts/2024-04-23-ruby-3-2-4-released.md b/en/news/_posts/2024-04-23-ruby-3-2-4-released.md index cfc236f314..0b93cd45f4 100644 --- a/en/news/_posts/2024-04-23-ruby-3-2-4-released.md +++ b/en/news/_posts/2024-04-23-ruby-3-2-4-released.md @@ -14,7 +14,6 @@ Please check the topics below for details. * [CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search]({%link en/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc]({%link en/news/_posts/2024-03-21-rce-rdoc-cve-2024-27281.md %}) -* [CVE-2024-27280: Buffer overread vulnerability in StringIO]({%link en/news/_posts/2024-03-21-buffer-overread-cve-2024-27280.md %}) See the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_2_4) for further details. diff --git a/ja/news/_posts/2024-04-23-ruby-3-2-4-released.md b/ja/news/_posts/2024-04-23-ruby-3-2-4-released.md index e82ab04b62..f9fe35204e 100644 --- a/ja/news/_posts/2024-04-23-ruby-3-2-4-released.md +++ b/ja/news/_posts/2024-04-23-ruby-3-2-4-released.md @@ -14,7 +14,6 @@ Ruby 3.2.4 がリリースされました。 * [CVE-2024-27282: 正規表現検索における任意のメモリアドレス読み取りの脆弱性]({%link ja/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc 内の .rdoc_options におけるRCE 脆弱性]({%link ja/news/_posts/2024-03-21-rce-rdoc-cve-2024-27281.md %}) -* [CVE-2024-27280: StringIOにおけるバッファーオーバーリード脆弱性]({%link ja/news/_posts/2024-03-21-buffer-overread-cve-2024-27280.md %}) 詳しくは [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_2_4) を参照してください。 From 5ff24041faebbcc2e4f6b771945e8199c6e169a3 Mon Sep 17 00:00:00 2001 From: nagachika Date: Mon, 19 Aug 2024 20:37:54 +0900 Subject: [PATCH 04/27] Removed a unrelated CVE link that was added by mistake in ruby-3.2.4 release announces. --- es/news/_posts/2024-04-23-ruby-3-2-4-released.md | 1 - ko/news/_posts/2024-04-23-ruby-3-2-4-released.md | 1 - zh_cn/news/_posts/2024-04-23-ruby-3-2-4-released.md | 1 - zh_tw/news/_posts/2024-04-23-ruby-3-2-4-released.md | 1 - 4 files changed, 4 deletions(-) diff --git a/es/news/_posts/2024-04-23-ruby-3-2-4-released.md b/es/news/_posts/2024-04-23-ruby-3-2-4-released.md index 0a84215266..db96250759 100644 --- a/es/news/_posts/2024-04-23-ruby-3-2-4-released.md +++ b/es/news/_posts/2024-04-23-ruby-3-2-4-released.md @@ -14,7 +14,6 @@ revise detalles en los temas siguientes. * [CVE-2024-27282: Lectura de direcciones de memoria arbitrarias al buscar Regex]({%link es/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: Vulnerabilidad RCE con .rdoc_options en RDoc](https://www.ruby-lang.org/es/news/2024/03/21/rce-rdoc-cve-2024-27281/) -* [CVE-2024-27280: Vulnerabilidad de sobre-lectura de buffer en StringIO](https://www.ruby-lang.org/es/news/2024/03/21/buffer-overread-cve-2024-27280/) Ver más detalles en la [publicación en Github](https://github.com/ruby/ruby/releases/tag/v3_2_4). diff --git a/ko/news/_posts/2024-04-23-ruby-3-2-4-released.md b/ko/news/_posts/2024-04-23-ruby-3-2-4-released.md index ef443be67c..ac30b6e203 100644 --- a/ko/news/_posts/2024-04-23-ruby-3-2-4-released.md +++ b/ko/news/_posts/2024-04-23-ruby-3-2-4-released.md @@ -14,7 +14,6 @@ Ruby 3.2.4가 릴리스되었습니다. * [CVE-2024-27282: 정규표현식 검색의 임의의 메모리 주소 읽기 취약점]({%link ko/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc에서 .rdoc_options 사용 시의 RCE 취약점]({%link ko/news/_posts/2024-03-21-rce-rdoc-cve-2024-27281.md %}) -* [CVE-2024-27280: StringIO에서 버퍼 초과 읽기 취약점]({%link ko/news/_posts/2024-03-21-buffer-overread-cve-2024-27280.md %}) 자세한 내용은 [GitHub 릴리스](https://github.com/ruby/ruby/releases/tag/v3_2_4)를 참조하세요. diff --git a/zh_cn/news/_posts/2024-04-23-ruby-3-2-4-released.md b/zh_cn/news/_posts/2024-04-23-ruby-3-2-4-released.md index acefb845c3..dace0fbe73 100644 --- a/zh_cn/news/_posts/2024-04-23-ruby-3-2-4-released.md +++ b/zh_cn/news/_posts/2024-04-23-ruby-3-2-4-released.md @@ -14,7 +14,6 @@ Ruby 3.2.4 已发布。 * [CVE-2024-27282: Regex 搜索中的任意地址读取漏洞]({%link zh_cn/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc 中 .rdoc_options 的 RCE 漏洞](https://www.ruby-lang.org/zh_cn/news/2024/03/21/rce-rdoc-cve-2024-27281/) -* [CVE-2024-27280: StringIO 中的缓存过读漏洞](https://www.ruby-lang.org/zh_cn/news/2024/03/21/buffer-overread-cve-2024-27280/) 您可以通过 [发布说明](https://github.com/ruby/ruby/releases/tag/v3_2_4) 获取进一步信息。 diff --git a/zh_tw/news/_posts/2024-04-23-ruby-3-2-4-released.md b/zh_tw/news/_posts/2024-04-23-ruby-3-2-4-released.md index 65b0f723bf..c55e7c0866 100644 --- a/zh_tw/news/_posts/2024-04-23-ruby-3-2-4-released.md +++ b/zh_tw/news/_posts/2024-04-23-ruby-3-2-4-released.md @@ -14,7 +14,6 @@ Ruby 3.2.4 已經發布了。 * [CVE-2024-27282: Regex 搜尋的任意記憶體位址讀取漏洞]({%link zh_tw/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc 中 .rdoc_options 的 RCE 漏洞](https://www.ruby-lang.org/zh_tw/news/2024/03/21/rce-rdoc-cve-2024-27281/) -* [CVE-2024-27280: StringIO 中的緩衝區 overread 漏洞](https://www.ruby-lang.org/zh_tw/news/2024/03/21/buffer-overread-cve-2024-27280/) 詳細的變動請參閱 [GitHub 發布](https://github.com/ruby/ruby/releases/tag/v3_2_4)。 From 57eee1f899980fde1ee3e6be3c16089c347cf53c Mon Sep 17 00:00:00 2001 From: nagachika Date: Sun, 25 Aug 2024 12:07:47 +0900 Subject: [PATCH 05/27] Removed a unrelated CVE link that was added by mistake in ruby-3.3.1 release announces. --- en/news/_posts/2024-04-23-ruby-3-3-1-released.md | 1 - ja/news/_posts/2024-04-23-ruby-3-3-1-released.md | 1 - ko/news/_posts/2024-04-23-ruby-3-3-1-released.md | 1 - zh_cn/news/_posts/2024-04-23-ruby-3-3-1-released.md | 1 - zh_tw/news/_posts/2024-04-23-ruby-3-3-1-released.md | 1 - 5 files changed, 5 deletions(-) diff --git a/en/news/_posts/2024-04-23-ruby-3-3-1-released.md b/en/news/_posts/2024-04-23-ruby-3-3-1-released.md index 3cd8cafe15..1119d572ed 100644 --- a/en/news/_posts/2024-04-23-ruby-3-3-1-released.md +++ b/en/news/_posts/2024-04-23-ruby-3-3-1-released.md @@ -14,7 +14,6 @@ Please check the topics below for details. * [CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search]({%link en/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc]({%link en/news/_posts/2024-03-21-rce-rdoc-cve-2024-27281.md %}) -* [CVE-2024-27280: Buffer overread vulnerability in StringIO]({%link en/news/_posts/2024-03-21-buffer-overread-cve-2024-27280.md %}) See the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_3_1) for further details. diff --git a/ja/news/_posts/2024-04-23-ruby-3-3-1-released.md b/ja/news/_posts/2024-04-23-ruby-3-3-1-released.md index 94a32eddab..94ac592d00 100644 --- a/ja/news/_posts/2024-04-23-ruby-3-3-1-released.md +++ b/ja/news/_posts/2024-04-23-ruby-3-3-1-released.md @@ -14,7 +14,6 @@ Ruby 3.3.1 がリリースされました。 * [CVE-2024-27282: 正規表現検索における任意のメモリアドレス読み取りの脆弱性]({%link ja/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc 内の .rdoc_options におけるRCE 脆弱性]({%link ja/news/_posts/2024-03-21-rce-rdoc-cve-2024-27281.md %}) -* [CVE-2024-27280: StringIOにおけるバッファーオーバーリード脆弱性]({%link ja/news/_posts/2024-03-21-buffer-overread-cve-2024-27280.md %}) 詳しくは [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_3_1) を参照してください。 diff --git a/ko/news/_posts/2024-04-23-ruby-3-3-1-released.md b/ko/news/_posts/2024-04-23-ruby-3-3-1-released.md index aeeec8afc6..05b4b2e137 100644 --- a/ko/news/_posts/2024-04-23-ruby-3-3-1-released.md +++ b/ko/news/_posts/2024-04-23-ruby-3-3-1-released.md @@ -14,7 +14,6 @@ Ruby 3.3.1이 릴리스되었습니다. * [CVE-2024-27282: 정규표현식 검색의 임의의 메모리 주소 읽기 취약점]({%link ko/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc에서 .rdoc_options 사용 시의 RCE 취약점]({%link ko/news/_posts/2024-03-21-rce-rdoc-cve-2024-27281.md %}) -* [CVE-2024-27280: StringIO에서 버퍼 초과 읽기 취약점]({%link ko/news/_posts/2024-03-21-buffer-overread-cve-2024-27280.md %}) 자세한 내용은 [GitHub 릴리스](https://github.com/ruby/ruby/releases/tag/v3_3_1)를 참조하세요. diff --git a/zh_cn/news/_posts/2024-04-23-ruby-3-3-1-released.md b/zh_cn/news/_posts/2024-04-23-ruby-3-3-1-released.md index 5fbd3e8c1e..bddf2004a4 100644 --- a/zh_cn/news/_posts/2024-04-23-ruby-3-3-1-released.md +++ b/zh_cn/news/_posts/2024-04-23-ruby-3-3-1-released.md @@ -14,7 +14,6 @@ Ruby 3.3.1 已发布。 * [CVE-2024-27282: Regex 搜索中的任意地址读取漏洞]({%link zh_cn/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc 中 .rdoc_options 的 RCE 漏洞](https://www.ruby-lang.org/zh_cn/news/2024/03/21/rce-rdoc-cve-2024-27281/) -* [CVE-2024-27280: StringIO 中的缓存过读漏洞](https://www.ruby-lang.org/zh_cn/news/2024/03/21/buffer-overread-cve-2024-27280/) 您可以通过 [发布说明](https://github.com/ruby/ruby/releases/tag/v3_3_1) 获取进一步信息。 diff --git a/zh_tw/news/_posts/2024-04-23-ruby-3-3-1-released.md b/zh_tw/news/_posts/2024-04-23-ruby-3-3-1-released.md index c126baf3b1..602a74100e 100644 --- a/zh_tw/news/_posts/2024-04-23-ruby-3-3-1-released.md +++ b/zh_tw/news/_posts/2024-04-23-ruby-3-3-1-released.md @@ -14,7 +14,6 @@ Ruby 3.3.1 已經發布了。 * [CVE-2024-27282: Regex 搜尋的任意記憶體位址讀取漏洞]({%link zh_tw/news/_posts/2024-04-23-arbitrary-memory-address-read-regexp-cve-2024-27282.md %}) * [CVE-2024-27281: RDoc 中 .rdoc_options 的 RCE 漏洞](https://www.ruby-lang.org/zh_tw/news/2024/03/21/rce-rdoc-cve-2024-27281/) -* [CVE-2024-27280: StringIO 中的緩衝區 overread 漏洞](https://www.ruby-lang.org/zh_tw/news/2024/03/21/buffer-overread-cve-2024-27280/) 詳細的變動請參閱 [GitHub 發布](https://github.com/ruby/ruby/releases/tag/v3_3_1)。 From 7a8287cb16ddc838736c92d9b48db22f7c55ee3a Mon Sep 17 00:00:00 2001 From: Shia Date: Tue, 27 Aug 2024 18:11:32 +0900 Subject: [PATCH 06/27] Improve cve-2024-43398 details --- en/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/en/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md b/en/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md index c2118b4d93..86ed5ca251 100644 --- a/en/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md +++ b/en/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md @@ -12,7 +12,7 @@ There is a DoS vulnerability in REXML gem. This vulnerability has been assigned ## Details -When parsing an XML that has many deep elements that have same local name attributes. +When parsing an XML that has many deep elements that have same local name attributes, REXML gem may take long time. It's only affected with the tree parser API. If you're using `REXML::Document.new` to parse an XML, you may be affected. From c5ff9bbfb3d3f17863957de41150a0dc3f730d99 Mon Sep 17 00:00:00 2001 From: Stan Lo Date: Tue, 27 Aug 2024 17:49:23 +0100 Subject: [PATCH 07/27] Remove dead or outdated links - Link 13 and 15 both point to https://ruby-doc.org/3.2.2, which is not up to date and don't provide more information than the official docs. - Link 17 points to https://rubydocs.org/ which is not maintained anymore. - Link 18 points to https://apidock.com/ only has information up to Ruby 2.6, which is clearly outdated. --- en/documentation/index.md | 22 ---------------------- 1 file changed, 22 deletions(-) diff --git a/en/documentation/index.md b/en/documentation/index.md index 1965f0706d..02716e2bef 100644 --- a/en/documentation/index.md +++ b/en/documentation/index.md @@ -55,15 +55,6 @@ the [installation guide](installation/) for help on installing Ruby. : The official Ruby API documentation for different versions including the currently unreleased (trunk) version. -[Ruby Core Reference][13] -: Pulled straight from the source code using [RDoc][14], this reference - work documents all of the core classes and modules (like String, - Array, Symbol, etc…). - -[Ruby Standard Library Reference][15] -: Also pulled from the source code using RDoc, this reference work - documents the standard library. - [Ruby C API Reference][extensions] : The official introduction to Ruby's C API. Great if you want to write C extensions @@ -73,12 +64,6 @@ the [installation guide](installation/) for help on installing Ruby. : The one-stop web site for reference documentation about Ruby gems and GitHub-hosted Ruby projects. -[Ruby & Rails Searchable API Docs][17] -: Rails and Ruby documentation with smart searching. - -[APIdock][18] -: Ruby, Rails and RSpec documentation with users’ notes. - [RubyAPI.org][rubyapi-org] : Easily find and browse Ruby classes, modules, and methods. @@ -125,8 +110,6 @@ documentation sources. If you have questions about Ruby the [mailing list](/en/community/mailing-lists/) is a great place to start. - - [1]: https://try.ruby-lang.org/ [2]: https://rubykoans.com/ [5]: https://poignant.guide @@ -135,13 +118,8 @@ If you have questions about Ruby the [9]: http://www.ruby-doc.org/docs/ProgrammingRuby/ [10]: http://pragmaticprogrammer.com/titles/ruby/index.html [12]: http://en.wikibooks.org/wiki/Ruby_programming_language -[13]: http://www.ruby-doc.org/core -[14]: https://ruby.github.io/rdoc/ -[15]: http://www.ruby-doc.org/stdlib [extensions]: https://docs.ruby-lang.org/en/master/extension_rdoc.html [16]: http://www.rubydoc.info/ -[17]: http://rubydocs.org/ -[18]: http://apidock.com/ [rubyapi-org]: https://rubyapi.org/ [19]: http://www.aptana.com/ [20]: http://www.gnu.org/software/emacs/ From 57833a4555cbd7cdec5b213db44537b107f534da Mon Sep 17 00:00:00 2001 From: Stan Lo Date: Tue, 27 Aug 2024 17:54:03 +0100 Subject: [PATCH 08/27] Make the link to VS Code directly visit its Ruby doc --- en/documentation/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/en/documentation/index.md b/en/documentation/index.md index 02716e2bef..2b2fdcb1d4 100644 --- a/en/documentation/index.md +++ b/en/documentation/index.md @@ -143,7 +143,7 @@ If you have questions about Ruby the [39]: http://kapeli.com/dash [docs-rlo-en]: https://docs.ruby-lang.org/en/ [atom]: https://atom.io/ -[vscode]: https://code.visualstudio.com/ +[vscode]: https://code.visualstudio.com/docs/languages/ruby [eric]: https://eric-ide.python-projects.org/ [kdevelop]: https://www.kdevelop.org/ [kate]: https://kate-editor.org/ From 6492b1bc5ac79b43c30f29d718e58cab0790be19 Mon Sep 17 00:00:00 2001 From: Shia Date: Wed, 28 Aug 2024 06:39:46 +0900 Subject: [PATCH 09/27] Translate "CVE-2024-43398: DoS vulnerability in REXML" (ko) (#3353) * cp {en,ko}/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md * Translate "CVE-2024-43398: DoS vulnerability in REXML" (ko) --- .../2024-08-22-dos-rexml-cve-2024-43398.md | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 ko/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md diff --git a/ko/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md b/ko/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md new file mode 100644 index 0000000000..8daecb6fdb --- /dev/null +++ b/ko/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md @@ -0,0 +1,31 @@ +--- +layout: news_post +title: "CVE-2024-43398: REXML의 DoS 취약점" +author: "kou" +translator: "shia" +date: 2024-08-22 03:00:00 +0000 +tags: security +lang: ko +--- + +REXML gem에서 DoS 취약점이 발견되었습니다. 이 취약점은 CVE 번호 [CVE-2024-43398](https://www.cve.org/CVERecord?id=CVE-2024-43398)로 등록되었습니다. REXML gem 업그레이드를 강하게 추천합니다. + +## 세부 내용 + +동일한 지역 이름 속성을 가진 여러 깊은 요소를 포함하는 XML을 파싱할 때, REXML gem은 처리에 긴 시간이 걸립니다. + +해당 취약점은 트리 파서 API에만 영향을 줍니다. XML을 파싱하기 위해 `REXML::Document.new`를 사용한다면 영향을 받을 수 있습니다. + +REXML gem을 3.3.6이나 그 이상으로 업데이트하세요. + +## 해당 버전 + +* REXML gem 3.3.5와 그 이하 + +## 도움을 준 사람 + +이 문제를 발견해 준 [l33thaxor](https://hackerone.com/l33thaxor)에게 감사를 표합니다. + +## 수정 이력 + +* 2024-08-22 03:00:00 (UTC) 최초 공개 From 51a4d8cacbe28e9057bcb80e889e9734f55b3514 Mon Sep 17 00:00:00 2001 From: Bear Su Date: Sun, 1 Sep 2024 11:12:08 +0800 Subject: [PATCH 10/27] Improve Text CVE 2024 43398 (zh_tw) --- zh_tw/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zh_tw/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md b/zh_tw/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md index e0f4adfd04..b0d24e2f0d 100644 --- a/zh_tw/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md +++ b/zh_tw/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md @@ -14,7 +14,7 @@ lang: zh_tw ## 風險細節 -當解析的 XML 擁有許多深層級的元素，並且這些元素有相同的名稱屬性時。 +當解析的 XML 擁有許多深層級的元素，並且這些元素有相同的名稱屬性時，REXML gem 可能會需要很長的處理時間。 此風險只有影響到 Tree 解析 API。如果您正在使用 `REXML::Document.new` 解析 XML，您可能會受到影響。 From 5a4bda084cb33bfd77199f81b52ecbaf2f2a5c35 Mon Sep 17 00:00:00 2001 From: Aoran Zeng Date: Mon, 2 Sep 2024 13:45:23 +0800 Subject: [PATCH 11/27] Fix rbenv for Windows GitHub URL --- en/documentation/installation/index.md | 3 ++- ja/documentation/installation/index.md | 2 +- ko/documentation/installation/index.md | 3 ++- zh_cn/documentation/installation/index.md | 3 ++- zh_tw/documentation/installation/index.md | 2 +- 5 files changed, 8 insertions(+), 5 deletions(-) diff --git a/en/documentation/installation/index.md b/en/documentation/installation/index.md index f87cd3103b..ba63647526 100644 --- a/en/documentation/installation/index.md +++ b/en/documentation/installation/index.md @@ -58,6 +58,7 @@ Here are available installation methods: * [asdf-vm](#asdf-vm) * [chruby](#chruby) * [rbenv](#rbenv) + * [rbenv for Windows](#rbenv-for-windows) * [RVM](#rvm) * [uru](#uru) * [Building from source](#building-from-source) @@ -391,7 +392,7 @@ though, because the installed Ruby won't be managed by any tools. [rvm]: http://rvm.io/ [rbenv]: https://github.com/rbenv/rbenv#readme -[rbenv-for-windows]: https://github.com/ccmywish/rbenv-for-windows#readme +[rbenv-for-windows]: https://github.com/RubyMetric/rbenv-for-windows#readme [ruby-build]: https://github.com/rbenv/ruby-build#readme [ruby-install]: https://github.com/postmodern/ruby-install#readme [chruby]: https://github.com/postmodern/chruby#readme diff --git a/ja/documentation/installation/index.md b/ja/documentation/installation/index.md index d11169fcfc..a18e7a8b01 100644 --- a/ja/documentation/installation/index.md +++ b/ja/documentation/installation/index.md @@ -342,5 +342,5 @@ $ sudo make install [rubystack]: https://bitnami.com/stack/ruby/virtual-machine [asdf-vm]: https://asdf-vm.com/ [asdf-ruby]: https://github.com/asdf-vm/asdf-ruby -[rbenv-for-windows]: https://github.com/ccmywish/rbenv-for-windows#readme +[rbenv-for-windows]: https://github.com/RubyMetric/rbenv-for-windows#readme [uru]: https://bitbucket.org/jonforums/uru/src/master/ diff --git a/ko/documentation/installation/index.md b/ko/documentation/installation/index.md index 56cd89788f..ad786cc914 100644 --- a/ko/documentation/installation/index.md +++ b/ko/documentation/installation/index.md @@ -57,6 +57,7 @@ Windows 10을 사용 중이라면 [Windows Subsystem for Linux][wsl]를 사용 * [관리자](#managers) * [chruby](#chruby) * [rbenv](#rbenv) + * [rbenv for Windows](#rbenv-for-windows) * [RVM](#rvm) * [uru](#uru) * [소스에서 빌드하기](#building-from-source) @@ -369,7 +370,7 @@ $ sudo make install [rvm]: http://rvm.io/ [rbenv]: https://github.com/rbenv/rbenv#readme -[rbenv-for-windows]: https://github.com/ccmywish/rbenv-for-windows#readme +[rbenv-for-windows]: https://github.com/RubyMetric/rbenv-for-windows#readme [ruby-build]: https://github.com/rbenv/ruby-build#readme [ruby-install]: https://github.com/postmodern/ruby-install#readme [chruby]: https://github.com/postmodern/chruby#readme diff --git a/zh_cn/documentation/installation/index.md b/zh_cn/documentation/installation/index.md index 2b9ea57375..774fc1f8b3 100644 --- a/zh_cn/documentation/installation/index.md +++ b/zh_cn/documentation/installation/index.md @@ -35,6 +35,7 @@ lang: zh_cn * [管理工具](#managers) * [chruby](#chruby) * [rbenv](#rbenv) + * [rbenv for Windows](#rbenv-for-windows) * [RVM](#rvm) * [uru](#uru) * [通过源码编译安装](#building-from-source) @@ -214,7 +215,7 @@ $ sudo make install [rvm]: http://rvm.io/ [rbenv]: https://github.com/rbenv/rbenv#readme -[rbenv-for-windows]: https://github.com/ccmywish/rbenv-for-windows#readme +[rbenv-for-windows]: https://github.com/RubyMetric/rbenv-for-windows#readme [ruby-build]: https://github.com/rbenv/ruby-build#readme [ruby-install]: https://github.com/postmodern/ruby-install#readme [chruby]: https://github.com/postmodern/chruby#readme diff --git a/zh_tw/documentation/installation/index.md b/zh_tw/documentation/installation/index.md index e5d50b5ca7..fd0e2bcff7 100644 --- a/zh_tw/documentation/installation/index.md +++ b/zh_tw/documentation/installation/index.md @@ -325,7 +325,7 @@ $ sudo make install [rvm]: http://rvm.io/ [rbenv]: https://github.com/rbenv/rbenv -[rbenv-for-windows]: https://github.com/ccmywish/rbenv-for-windows#readme +[rbenv-for-windows]: https://github.com/RubyMetric/rbenv-for-windows#readme [ruby-build]: https://github.com/rbenv/ruby-build#readme [ruby-install]: https://github.com/postmodern/ruby-install#readme [chruby]: https://github.com/postmodern/chruby From 37cf179ec1763231af2a0c725b7efce8212794c5 Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Mon, 2 Sep 2024 14:52:25 +0900 Subject: [PATCH 12/27] Update archive url for ruby-talk and ruby-core --- bg/community/mailing-lists/index.md | 6 +++--- de/community/mailing-lists/index.md | 6 +++--- en/community/mailing-lists/index.md | 6 +++--- en/documentation/faq/1/index.md | 2 +- es/community/mailing-lists/index.md | 6 +++--- fr/community/mailing-lists/index.md | 6 +++--- id/community/mailing-lists/index.md | 6 +++--- it/community/mailing-lists/index.md | 6 +++--- ko/community/mailing-lists/index.md | 6 +++--- ko/documentation/faq/1/index.md | 2 +- pl/community/mailing-lists/index.md | 6 +++--- pt/community/mailing-lists/index.md | 6 +++--- ru/community/mailing-lists/index.md | 6 +++--- tr/community/mailing-lists/index.md | 6 +++--- vi/community/mailing-lists/index.md | 6 +++--- zh_cn/community/mailing-lists/index.md | 6 +++--- zh_tw/community/mailing-lists/index.md | 6 +++--- 17 files changed, 47 insertions(+), 47 deletions(-) diff --git a/bg/community/mailing-lists/index.md b/bg/community/mailing-lists/index.md index 56386a242c..d0ad402338 100644 --- a/bg/community/mailing-lists/index.md +++ b/bg/community/mailing-lists/index.md @@ -36,6 +36,6 @@ comp.lang.ruby дискусионна група. -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/de/community/mailing-lists/index.md b/de/community/mailing-lists/index.md index 41d8c3f34a..1d013d0d77 100644 --- a/de/community/mailing-lists/index.md +++ b/de/community/mailing-lists/index.md @@ -50,9 +50,9 @@ einschließlich der Listen in japanischer Sprache. [guidelines]: /en/community/mailing-lists/ruby-talk-guidelines/ [clrFAQ]: http://rubyhacker.com/clrFAQ.html -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ [6]: http://lists.ruby-lang.org/cgi-bin/mailman/listinfo/ruby-de [7]: http://lists.ruby-lang.org/pipermail/ruby-de/ [8]: http://planet.ruby-portal.de/ruby-de.html diff --git a/en/community/mailing-lists/index.md b/en/community/mailing-lists/index.md index da3fed322f..c5ad7a7dc4 100644 --- a/en/community/mailing-lists/index.md +++ b/en/community/mailing-lists/index.md @@ -39,7 +39,7 @@ including the lists in Japanese language. [guidelines]: ruby-talk-guidelines/ [clrFAQ]: http://rubyhacker.com/clrFAQ.html -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ [rubytalk]: https://rubytalk.org/ diff --git a/en/documentation/faq/1/index.md b/en/documentation/faq/1/index.md index 1d03ad67e0..c536bef63c 100644 --- a/en/documentation/faq/1/index.md +++ b/en/documentation/faq/1/index.md @@ -205,7 +205,7 @@ There are several mailing lists talking about Ruby. See the page for more information. You can search the mailing list archives using -[https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/](https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/). +[https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/](https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/). (This is the URL for the ruby-talk list, munge as required for the others). ### How can I thread the mailing list in mutt? diff --git a/es/community/mailing-lists/index.md b/es/community/mailing-lists/index.md index 6da4ab13bd..5e6f2a8649 100644 --- a/es/community/mailing-lists/index.md +++ b/es/community/mailing-lists/index.md @@ -32,6 +32,6 @@ Ruby-CVS -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[6]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[6]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/fr/community/mailing-lists/index.md b/fr/community/mailing-lists/index.md index d27d9037ef..9413111715 100644 --- a/fr/community/mailing-lists/index.md +++ b/fr/community/mailing-lists/index.md @@ -33,6 +33,6 @@ Ruby-CVS -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[6]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[6]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/id/community/mailing-lists/index.md b/id/community/mailing-lists/index.md index f782ea5280..ab284eccce 100644 --- a/id/community/mailing-lists/index.md +++ b/id/community/mailing-lists/index.md @@ -51,7 +51,7 @@ termasuk daftar milis dalam bahasa Jepang. [1]: http://id.wikipedia.org/wiki/Milis "Group diskusi di internet dimana setiap orang bisa berlangganan dan berpartisipasi didalamnya." [2]: http://groups.yahoo.com/group/id-ruby/ [3]: http://www.mail-archive.com/id-ruby@yahoogroups.com/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[6]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[6]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ [rubytalk]: https://rubytalk.org/ diff --git a/it/community/mailing-lists/index.md b/it/community/mailing-lists/index.md index 7493eef6de..f3db1cdcfe 100644 --- a/it/community/mailing-lists/index.md +++ b/it/community/mailing-lists/index.md @@ -32,6 +32,6 @@ Ruby-CVS -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[6]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[6]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/ko/community/mailing-lists/index.md b/ko/community/mailing-lists/index.md index a736eacb74..9ebaa99f61 100644 --- a/ko/community/mailing-lists/index.md +++ b/ko/community/mailing-lists/index.md @@ -38,7 +38,7 @@ ruby-lang.org의 일본어 리스트를 포함한 모든 메일링 리스트에 [guidelines]: /en/community/mailing-lists/ruby-talk-guidelines/ [clrFAQ]: http://rubyhacker.com/clrFAQ.html -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ [rubytalk]: https://rubytalk.org/ diff --git a/ko/documentation/faq/1/index.md b/ko/documentation/faq/1/index.md index e98913f95c..ac8cfcdd49 100644 --- a/ko/documentation/faq/1/index.md +++ b/ko/documentation/faq/1/index.md @@ -193,7 +193,7 @@ comp.lang.ruby는 2000년 5월에 설립되었습니다. Ruby에 대해 이야기하는 여러 메일링 리스트가 있습니다. 자세한 내용은 [메일링 리스트](/ko/community/mailing-lists/) 페이지를 참조하세요. -를 +를 사용하여 메일링 리스트 아카이브를 검색할 수 있습니다. (이것은 ruby-talk 메일링 리스트의 URL이며, 다른 메일링 리스트를 원하면 변경해서 사용하세요.) diff --git a/pl/community/mailing-lists/index.md b/pl/community/mailing-lists/index.md index c8d456005b..98e3eb1ccf 100644 --- a/pl/community/mailing-lists/index.md +++ b/pl/community/mailing-lists/index.md @@ -37,6 +37,6 @@ listy: -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[6]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[6]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/pt/community/mailing-lists/index.md b/pt/community/mailing-lists/index.md index 39be72f00c..10bab12a31 100644 --- a/pt/community/mailing-lists/index.md +++ b/pt/community/mailing-lists/index.md @@ -39,7 +39,7 @@ Ruby << portuguese -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ [ruby-pt]: http://groups.google.com/group/ruby-pt diff --git a/ru/community/mailing-lists/index.md b/ru/community/mailing-lists/index.md index a82fe126d4..1ec1770f3a 100644 --- a/ru/community/mailing-lists/index.md +++ b/ru/community/mailing-lists/index.md @@ -36,6 +36,6 @@ Ruby-CVS -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/tr/community/mailing-lists/index.md b/tr/community/mailing-lists/index.md index c88d2df8b1..7484f840cd 100644 --- a/tr/community/mailing-lists/index.md +++ b/tr/community/mailing-lists/index.md @@ -41,7 +41,7 @@ listeleri hakkında daha fazla bilgi için [guidelines]: ruby-talk-guidelines/ [clrFAQ]: http://rubyhacker.com/clrFAQ.html -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ [rubytalk]: https://rubytalk.org/ diff --git a/vi/community/mailing-lists/index.md b/vi/community/mailing-lists/index.md index ef152caafb..26eddc62dc 100644 --- a/vi/community/mailing-lists/index.md +++ b/vi/community/mailing-lists/index.md @@ -36,6 +36,6 @@ The comp.lang.ruby Newsgroup -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/zh_cn/community/mailing-lists/index.md b/zh_cn/community/mailing-lists/index.md index 06e1861717..cb6506b07f 100644 --- a/zh_cn/community/mailing-lists/index.md +++ b/zh_cn/community/mailing-lists/index.md @@ -30,6 +30,6 @@ comp.lang.ruby新闻组 -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[6]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[6]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ diff --git a/zh_tw/community/mailing-lists/index.md b/zh_tw/community/mailing-lists/index.md index 198689b4d6..3ee9c23057 100644 --- a/zh_tw/community/mailing-lists/index.md +++ b/zh_tw/community/mailing-lists/index.md @@ -32,6 +32,6 @@ The comp.lang.ruby 新聞組 [1]: https://www.ruby-forum.com/ -[3]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-talk@ml.ruby-lang.org/ -[4]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-core@ml.ruby-lang.org/ -[5]: https://ml.ruby-lang.org/mailman3/hyperkitty/list/ruby-doc@ml.ruby-lang.org/ +[3]: https://ml.ruby-lang.org/archives/list/ruby-talk@ml.ruby-lang.org/ +[4]: https://ml.ruby-lang.org/archives/list/ruby-core@ml.ruby-lang.org/ +[5]: https://ml.ruby-lang.org/archives/list/ruby-doc@ml.ruby-lang.org/ From fcc3715e44d66efb875c5f25cc5e2b8f9d13beb4 Mon Sep 17 00:00:00 2001 From: matzbot Date: Tue, 3 Sep 2024 15:55:57 +0900 Subject: [PATCH 13/27] Create release for 3.3.5 (#3359) * Create release for 3.3.5 * Update 2024-09-02-3-3-5-released.md * Rename 2024-09-02-3-3-5-released.md to 2024-09-03-3-3-5-released.md --------- Co-authored-by: GitHub Actions Bot Co-authored-by: Takashi Kokubun --- en/news/_posts/2024-09-03-3-3-5-released.md | 50 +++++++++++++++++++++ 1 file changed, 50 insertions(+) create mode 100644 en/news/_posts/2024-09-03-3-3-5-released.md diff --git a/en/news/_posts/2024-09-03-3-3-5-released.md b/en/news/_posts/2024-09-03-3-3-5-released.md new file mode 100644 index 0000000000..4780be7748 --- /dev/null +++ b/en/news/_posts/2024-09-03-3-3-5-released.md @@ -0,0 +1,50 @@ +--- +layout: news_post +title: "Ruby 3.3.5 Released" +author: k0kubun +translator: +date: 2024-09-03 06:40:00 +0000 +lang: en +--- + +Ruby 3.3.5 has been released. + +This is a routine update that includes minor bug fixes. +We recommend upgrading your Ruby version at your earliest convenience. +For more details, please refer to the [GitHub release notes](https://github.com/ruby/ruby/releases/tag/v3_3_5). + +## Release Schedule + +As previously [announced](https://www.ruby-lang.org/en/news/2024/07/09/ruby-3-3-4-released/), we intend to release the latest stable Ruby version (currently Ruby 3.3) every 2 months following a `.1` release. + +We expect to release Ruby 3.3.6 on November 5th and Ruby 3.3.7 on January 7th. If any significant changes arise that impact a large number of users, we may release a new version earlier than scheduled. + +## Download + +{% assign release = site.data.releases | where: "version", "3.3.5" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## Release Comment + +Many committers, developers, and users who provided bug reports helped us make this release. +Thanks for their contributions. From 77878eadaf675e0b71681d6954dba1450ae473fc Mon Sep 17 00:00:00 2001 From: Takashi Kokubun Date: Tue, 3 Sep 2024 00:05:39 -0700 Subject: [PATCH 14/27] Fix downloads.yml and releases.yml for 3.3.5 (#3360) * Fix downloads.yml and releases.yml for 3.3.5 * Fix url --- _data/downloads.yml | 2 +- _data/releases.yml | 24 ++++++++++++++++++++++++ 2 files changed, 25 insertions(+), 1 deletion(-) diff --git a/_data/downloads.yml b/_data/downloads.yml index 6bcf6a680d..8abbc92eb4 100644 --- a/_data/downloads.yml +++ b/_data/downloads.yml @@ -8,7 +8,7 @@ preview: stable: - - 3.3.4 + - 3.3.5 - 3.2.5 # optional diff --git a/_data/releases.yml b/_data/releases.yml index 0794b2401f..a3b23d5e63 100644 --- a/_data/releases.yml +++ b/_data/releases.yml @@ -52,6 +52,30 @@ # 3.3 series +- version: 3.3.5 + date: 2024-09-03 + post: /en/news/2024/09/03/3-3-5-released/ + url: + gz: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.5.tar.gz + zip: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.5.zip + xz: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.5.tar.xz + size: + gz: 22129139 + zip: 27020194 + xz: 16403660 + sha1: + gz: 59444476bbe9e789fc777d8fb4dd456bc057604f + zip: ccb32746aef491ce05be42218301e2c47185e5fc + xz: 692bc3188bdb9ec30b8672543961b011d699590a + sha256: + gz: 3781a3504222c2f26cb4b9eb9c1a12dbf4944d366ce24a9ff8cf99ecbce75196 + zip: d3c13e124707494935d00ebc5c7983b0252bc13de49223fd31104ba5467a057a + xz: 51aec7ea89b46125a2c9adc6f36766b65023d47952b916b1aed300ddcc042359 + sha512: + gz: 5c482059628ef9de5d8a6ad4751f8043f2fc2b159b768265be7f3ee0574ad51d9500ee4fc9146c5978fbd51313039c3de39e7b7a4dedc9bcd5d09a41a713f1a7 + zip: bf83af835a74283aff21042538ee1f1eb70ff12dac1edd4672d787547cd29cb7b69a9299682f89c8499eb610737b10a7fc03eca038574cb4ba565205d96b0016 + xz: dd5c6a7f74854e143e0ca46b9d7c0d1983fc4886f5f733cd108345dbf4b21f61ad978ad6806e05a57b7af28fd9216dd38d7145808188bbb3695a7f3a4eda3883 + - version: 3.3.4 date: 2024-07-09 post: /en/news/2024/07/09/ruby-3-3-4-released/ From c0678be3affb03ef7b6ead6aae9d57e7f003a476 Mon Sep 17 00:00:00 2001 From: egamasa <40469431+egamasa@users.noreply.github.com> Date: Tue, 3 Sep 2024 18:49:17 +0900 Subject: [PATCH 15/27] Translate Home link in site navigation (ja) --- _data/locales/ja.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_data/locales/ja.yml b/_data/locales/ja.yml index 351e725332..2b8667468c 100644 --- a/_data/locales/ja.yml +++ b/_data/locales/ja.yml @@ -3,7 +3,7 @@ ruby: Ruby slogan: A Programmer's Best Friend sitelinks: -- text: Home +- text: ホーム url: /ja home: true - text: ダウンロード From d6ef2da9948acd7884483cce78a669271c1bab94 Mon Sep 17 00:00:00 2001 From: Bear Su Date: Tue, 3 Sep 2024 18:21:20 +0800 Subject: [PATCH 16/27] Translate Ruby 3.3.5 Released (zh_tw) --- .../news/_posts/2024-09-03-3-3-5-released.md | 49 +++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 zh_tw/news/_posts/2024-09-03-3-3-5-released.md diff --git a/zh_tw/news/_posts/2024-09-03-3-3-5-released.md b/zh_tw/news/_posts/2024-09-03-3-3-5-released.md new file mode 100644 index 0000000000..a10fbc3aa2 --- /dev/null +++ b/zh_tw/news/_posts/2024-09-03-3-3-5-released.md @@ -0,0 +1,49 @@ +--- +layout: news_post +title: "Ruby 3.3.5 發布" +author: k0kubun +translator: "Bear Su" +date: 2024-09-03 06:40:00 +0000 +lang: zh_tw +--- + +Ruby 3.3.5 已經發布了。 + +這是包括修復小型錯誤的例行更新。 +我們建議您儘早升級您的 Ruby 版本。 +詳細的變動請參閱 [GitHub 發布](https://github.com/ruby/ruby/releases/tag/v3_3_5)。 + +## 發布時程 + +如同之前[公布](https://www.ruby-lang.org/zh_tw/news/2024/07/09/ruby-3-3-4-released/)，我們打算在「.1」版本發布後每 2 個月發布一次最新的穩定 Ruby 版本（目前為 Ruby 3.3）。 + +我們預計 Ruby 3.3.6 於 11 月 5 日發布，Ruby 3.3.7 於 1 月 7 日發布。如果有任何變更影響到相當多的人，我們可能會比預期更早發佈新版本。 + +## 下載 + +{% assign release = site.data.releases | where: "version", "3.3.5" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## 發布紀錄 + +許多提交者、開發者和漏洞回報者幫助了此版本的發布，在此感謝所有人的貢獻。 From bd7cb221e99cb130cd2ee1822334c83e018adb0f Mon Sep 17 00:00:00 2001 From: egamasa <40469431+egamasa@users.noreply.github.com> Date: Tue, 3 Sep 2024 19:50:03 +0900 Subject: [PATCH 17/27] Translate "Ruby 3.3.3 Released" (ja) --- .../_posts/2024-06-12-ruby-3-3-3-released.md | 53 +++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 ja/news/_posts/2024-06-12-ruby-3-3-3-released.md diff --git a/ja/news/_posts/2024-06-12-ruby-3-3-3-released.md b/ja/news/_posts/2024-06-12-ruby-3-3-3-released.md new file mode 100644 index 0000000000..ad5e9f477c --- /dev/null +++ b/ja/news/_posts/2024-06-12-ruby-3-3-3-released.md @@ -0,0 +1,53 @@ +--- +layout: news_post +title: "Ruby 3.3.3 リリース" +author: "k0kubun" +translator: "egamasa" +date: 2024-06-12 00:30:00 +0000 +lang: ja +--- + +Ruby 3.3.3 がリリースされました。 + +このリリースには、以下が含まれています。 + +* RubyGems 3.5.11 +* Bundler 2.5.11 +* REXML 3.2.8 +* strscan 3.0.9 +* `--dump=prism_parsetree` を `--parser=prism --dump=parsetree` に置き換えました。 +* シンボルのエンコーディング失敗時に、`EncodingError` の代わりに `SyntaxError` を発生させます。 +* Ripper での解析時のメモリリークを修正しました。 +* YJIT、`**{}`、`Ripper.tokenize`、`RubyVM::InstructionSequence#to_binary`、`--with-gmp` および一部のビルド環境におけるバグ修正 + +詳しくは [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_3_3) を参照してください。 + +## ダウンロード + +{% assign release = site.data.releases | where: "version", "3.3.3" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## リリースコメント + +Ruby 開発者の皆様、バグや脆弱性を報告してくれたユーザーの皆様のご協力により本リリースは行われています。 +皆様のご協力に感謝します。 From 289356d8ab806e3be64246843921c8c9eec4e03e Mon Sep 17 00:00:00 2001 From: Shia Date: Wed, 4 Sep 2024 07:09:10 +0900 Subject: [PATCH 18/27] Follow up "Improve documentation page" (ko) (#3363) --- ko/documentation/index.md | 21 +-------------------- 1 file changed, 1 insertion(+), 20 deletions(-) diff --git a/ko/documentation/index.md b/ko/documentation/index.md index 843f3ab17f..dc46f7017f 100644 --- a/ko/documentation/index.md +++ b/ko/documentation/index.md @@ -62,14 +62,6 @@ Ruby를 배울 수 있는 매뉴얼과 튜토리얼, 코딩할 때 도움이 되 [공식 API 문서][docs-rlo-en] : 아직 릴리스되지 않은 트렁크를 포함한 여러 Ruby 버전의 공식 API 문서입니다. -[Ruby 코어 레퍼런스][13] (영문) -: [RDoc][14]을 이용해 소스에서 추출한 레퍼런스입니다. String, Array, - Symbol 등 모든 코어 클래스와 모듈에 대한 문서를 찾아볼 수 있습니다. - -[Ruby 표준 라이브러리][15] (영문) -: 마찬가지로 RDoc을 이용해 소스에서 추출한 것으로 표준 라이브러리에 - 대한 레퍼런스입니다. - [Ruby C API 레퍼런스][extensions] (영문) : Ruby의 공식 C API 문서입니다. Ruby 개발에 참여하거나, C 확장을 개발할 때 도움이 될 것입니다. @@ -78,12 +70,6 @@ Ruby를 배울 수 있는 매뉴얼과 튜토리얼, 코딩할 때 도움이 되 : Ruby gem과 GitHub에서 호스팅 되는 Ruby 프로젝트의 레퍼런스 문서들을 모아놓은 사이트입니다. -[Ruby & Rails Searchable API Docs][17] (영문) -: 스마트 검색이 가능한 Ruby, Rails 문서입니다. - -[APIdock][18] (영문) -: 유저의 댓글이 달린 Ruby, Rails, RSpec의 문서입니다. - [Ruby API][40] (영문) : Ruby 클래스, 모듈, 메서드를 편하게 찾고 탐색하세요. @@ -138,13 +124,8 @@ Ruby를 코딩할 때 운영체제의 기본 편집기를 사용할 수 있습 [9]: http://www.ruby-doc.org/docs/ProgrammingRuby/ [10]: http://pragmaticprogrammer.com/titles/ruby/index.html [12]: http://en.wikibooks.org/wiki/Ruby_programming_language -[13]: http://www.ruby-doc.org/core -[14]: https://ruby.github.io/rdoc/ -[15]: http://www.ruby-doc.org/stdlib [extensions]: https://docs.ruby-lang.org/en/master/extension_rdoc.html [16]: http://www.rubydoc.info/ -[17]: http://rubydocs.org/ -[18]: http://apidock.com/ [19]: http://www.aptana.com/ [20]: http://www.gnu.org/software/emacs/ [21]: http://www.emacswiki.org/emacs/RubyMode @@ -168,7 +149,7 @@ Ruby를 코딩할 때 운영체제의 기본 편집기를 사용할 수 있습 [40]: https://rubyapi.org/ [docs-rlo-en]: https://docs.ruby-lang.org/en/ [atom]: https://atom.io/ -[vscode]: https://code.visualstudio.com/ +[vscode]: https://code.visualstudio.com/docs/languages/ruby [eric]: https://eric-ide.python-projects.org/ [kdevelop]: https://www.kdevelop.org/ [kate]: https://kate-editor.org/ From d1dd39f162d06f93695f7488c174227545f81431 Mon Sep 17 00:00:00 2001 From: Shia Date: Wed, 4 Sep 2024 13:35:50 +0900 Subject: [PATCH 19/27] Translate "Ruby 3.3.5 Released" (ko) (#3362) * cp {en,ko}/news/_posts/2024-09-03-3-3-5-released.md * Translate "Ruby 3.3.5 Released" (ko) * Apply suggestions from code review Co-authored-by: Chayoung You --------- Co-authored-by: Chayoung You --- ko/news/_posts/2024-09-03-3-3-5-released.md | 50 +++++++++++++++++++++ 1 file changed, 50 insertions(+) create mode 100644 ko/news/_posts/2024-09-03-3-3-5-released.md diff --git a/ko/news/_posts/2024-09-03-3-3-5-released.md b/ko/news/_posts/2024-09-03-3-3-5-released.md new file mode 100644 index 0000000000..2e2b176920 --- /dev/null +++ b/ko/news/_posts/2024-09-03-3-3-5-released.md @@ -0,0 +1,50 @@ +--- +layout: news_post +title: "Ruby 3.3.5 릴리스" +author: k0kubun +translator: shia +date: 2024-09-03 06:40:00 +0000 +lang: ko +--- + +Ruby 3.3.5가 릴리스되었습니다. + +이번 릴리스는 일반적인 업데이트로, 사소한 버그 수정이 포함되어 있습니다. +가능한 빨리 Ruby 버전을 업그레이드하는 것을 권장합니다. +자세한 내용은 [GitHub 릴리스 노트](https://github.com/ruby/ruby/releases/tag/v3_3_5)를 참조하세요. + +## 릴리스 일정 + +이전에 [발표했던 것](https://www.ruby-lang.org/ko/news/2024/07/09/ruby-3-3-4-released/)처럼, 앞으로 최신 안정 버전의 Ruby(현재 Ruby 3.3)를 `.1` 릴리스 이후 2개월마다 릴리스할 계획입니다. + +3.3.6은 11월 5일에, 3.3.7은 1월 7일에 릴리스될 예정입니다. 많은 사람들에게 영향을 미치는 변경 사항이 있을 경우, 예상보다 빨리 새 버전을 릴리스할 수 있습니다. + +## 다운로드 + +{% assign release = site.data.releases | where: "version", "3.3.5" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## 릴리스 코멘트 + +많은 커미터, 개발자, 버그를 보고해 준 사용자들이 이 릴리스를 만드는 데 도움을 주었습니다. +그들의 기여에 감사드립니다. From d141d824fe6de76f6f2064ec908c6ad2f2d3f07c Mon Sep 17 00:00:00 2001 From: egamasa <40469431+egamasa@users.noreply.github.com> Date: Wed, 4 Sep 2024 20:11:36 +0900 Subject: [PATCH 20/27] Translate "Ruby 3.3.4 Released" (ja) --- .../_posts/2024-07-09-ruby-3-3-4-released.md | 54 +++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 ja/news/_posts/2024-07-09-ruby-3-3-4-released.md diff --git a/ja/news/_posts/2024-07-09-ruby-3-3-4-released.md b/ja/news/_posts/2024-07-09-ruby-3-3-4-released.md new file mode 100644 index 0000000000..3f3f787ec5 --- /dev/null +++ b/ja/news/_posts/2024-07-09-ruby-3-3-4-released.md @@ -0,0 +1,54 @@ +--- +layout: news_post +title: "Ruby 3.3.4 リリース" +author: "k0kubun" +translator: "egamasa" +date: 2024-07-09 00:30:00 +0000 +lang: ja +--- + +Ruby 3.3.4 がリリースされました。 + +このリリースでは、Ruby 3.3.3 にバンドルされているいくつかの gem （`net-pop`、`net-ftp`、`net-imap` および `prime`）において、gemspec の依存関係が欠落していたリグレッションが修正されました [[Bug #20581]](https://bugs.ruby-lang.org/issues/20581)。 +この修正により、Bundler はこれらの gem を Heroku などのプラットフォームへ正常にインストールできるようになりました。 +現在 `bundle install` を正常に実行できている場合、この問題は発生しないかもしれません。 + +そのほか、数多くの軽微なバグ修正を行っています。 +詳しくは [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_3_4) を参照してください。 + +## リリーススケジュール + +今後は、最新の安定版 Ruby（現在は Ruby 3.3）を `.1` リリース後の2ヶ月おきにリリースする予定です。 +Ruby 3.3 の場合、3.3.5 は 9 月 3 日に、3.3.6 は 11 月 5 日に、3.3.7 は 1 月 7 日にリリースされる予定です。 + +Heroku 上で Ruby 3.3.3 を使用するユーザーに影響を与える今回のリリースのように、多くのユーザーに影響を与えるような変更があった場合、予定よりも早く新しいバージョンをリリースすることがあります。 + +## ダウンロード + +{% assign release = site.data.releases | where: "version", "3.3.4" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## リリースコメント + +Ruby 開発者の皆様、バグや脆弱性を報告してくれたユーザーの皆様のご協力により本リリースは行われています。 +皆様のご協力に感謝します。 From 698e5e4a67c0375ea141c3802a9fc180251505e4 Mon Sep 17 00:00:00 2001 From: egamasa <40469431+egamasa@users.noreply.github.com> Date: Wed, 4 Sep 2024 20:56:24 +0900 Subject: [PATCH 21/27] Translate CVE-2024-39908 (ja) --- .../2024-07-16-dos-rexml-cve-2024-39908.md | 29 +++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 ja/news/_posts/2024-07-16-dos-rexml-cve-2024-39908.md diff --git a/ja/news/_posts/2024-07-16-dos-rexml-cve-2024-39908.md b/ja/news/_posts/2024-07-16-dos-rexml-cve-2024-39908.md new file mode 100644 index 0000000000..ca343d5448 --- /dev/null +++ b/ja/news/_posts/2024-07-16-dos-rexml-cve-2024-39908.md @@ -0,0 +1,29 @@ +--- +layout: news_post +title: "CVE-2024-39908: REXML内のDoS脆弱性" +author: "watson1978" +translator: "egamasa" +date: 2024-07-16 03:00:00 +0000 +tags: security +lang: ja +--- + +REXML gem内のDoS脆弱性が発見されました。この脆弱性は、[CVE-2024-39908](https://www.cve.org/CVERecord?id=CVE-2024-39908) として登録されています。REXML gem をアップグレードすることを強く推奨します。 + +## 詳細 + +REXML gem は、 `<`、`0` および `%>` のような特定の文字が多く含まれているXMLドキュメントの解析に時間がかかることがあります。 + +REXML gem を 3.3.2 以上にアップデートしてください。 + +## 影響を受けるバージョン + +* REXML gem 3.3.1 以前 + +## クレジット + +この脆弱性情報は、[mprogrammer](https://hackerone.com/mprogrammer) 氏によって報告されました。 + +## 更新履歴 + +* 2024-07-16 12:00:00 (JST) 初版 From 4f88b27df83928737d230055987f402a0ad2a130 Mon Sep 17 00:00:00 2001 From: egamasa <40469431+egamasa@users.noreply.github.com> Date: Wed, 4 Sep 2024 20:56:38 +0900 Subject: [PATCH 22/27] Translate CVE-2024-41123 (ja) --- .../2024-08-01-dos-rexml-cve-2024-41123.md | 29 +++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41123.md diff --git a/ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41123.md b/ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41123.md new file mode 100644 index 0000000000..4c4c48b689 --- /dev/null +++ b/ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41123.md @@ -0,0 +1,29 @@ +--- +layout: news_post +title: "CVE-2024-41123: REXML内のDoS脆弱性" +author: "kou" +translator: "egamasa" +date: 2024-08-01 03:00:00 +0000 +tags: security +lang: ja +--- + +REXML gem内のDoS脆弱性が発見されました。この脆弱性は、[CVE-2024-41123](https://www.cve.org/CVERecord?id=CVE-2024-41123) として登録されています。REXML gem をアップグレードすることを強く推奨します。 + +## 詳細 + +REXML gem は、空白文字、`>]` および `]>` のような特定の文字が多く含まれているXMLドキュメントの解析に時間がかかることがあります。 + +REXML gem を 3.3.3 以上にアップデートしてください。 + +## 影響を受けるバージョン + +* REXML gem 3.3.2 以前 + +## クレジット + +この脆弱性情報は、[mprogrammer](https://hackerone.com/mprogrammer) 氏および [scyoon](https://hackerone.com/scyoon) 氏によって報告されました。 + +## 更新履歴 + +* 2024-08-01 12:00:00 (JST) 初版 From 607d0682ec557b70125085af8674b64cb0efde46 Mon Sep 17 00:00:00 2001 From: egamasa <40469431+egamasa@users.noreply.github.com> Date: Wed, 4 Sep 2024 20:56:49 +0900 Subject: [PATCH 23/27] Translate CVE-2024-41946 (ja) --- .../2024-08-01-dos-rexml-cve-2024-41946.md | 29 +++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41946.md diff --git a/ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41946.md b/ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41946.md new file mode 100644 index 0000000000..fb940eecaf --- /dev/null +++ b/ja/news/_posts/2024-08-01-dos-rexml-cve-2024-41946.md @@ -0,0 +1,29 @@ +--- +layout: news_post +title: "CVE-2024-41946: REXML内のDoS脆弱性" +author: "kou" +translator: "egamasa" +date: 2024-08-01 03:00:00 +0000 +tags: security +lang: ja +--- + +REXML gem内のDoS脆弱性が発見されました。この脆弱性は、[CVE-2024-41946](https://www.cve.org/CVERecord?id=CVE-2024-41946) として登録されています。REXML gem をアップグレードすることを強く推奨します。 + +## 詳細 + +REXML gem は、SAX2 またはプル方式の XML パーサを使用した場合、多数のエンティティ展開を持つ XML ドキュメントの解析に時間がかかることがあります。 + +REXML gem を 3.3.3 以上にアップデートしてください。 + +## 影響を受けるバージョン + +* REXML gem 3.3.2 以前 + +## クレジット + +この脆弱性情報は、[NAITOH Jun](https://github.com/naitoh) 氏によって報告されました。 + +## 更新履歴 + +* 2024-08-01 12:00:00 (JST) 初版 From fdf0b92ca70d00cf99c9ec1e6bcde316a0e1d1ee Mon Sep 17 00:00:00 2001 From: egamasa <40469431+egamasa@users.noreply.github.com> Date: Wed, 4 Sep 2024 20:56:59 +0900 Subject: [PATCH 24/27] Translate CVE-2024-43398 (ja) --- .../2024-08-22-dos-rexml-cve-2024-43398.md | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 ja/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md diff --git a/ja/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md b/ja/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md new file mode 100644 index 0000000000..91430ad44e --- /dev/null +++ b/ja/news/_posts/2024-08-22-dos-rexml-cve-2024-43398.md @@ -0,0 +1,31 @@ +--- +layout: news_post +title: "CVE-2024-43398: REXML内のDoS脆弱性" +author: "kou" +translator: "egamasa" +date: 2024-08-22 03:00:00 +0000 +tags: security +lang: ja +--- + +REXML gem内のDoS脆弱性が発見されました。この脆弱性は、[CVE-2024-43398](https://www.cve.org/CVERecord?id=CVE-2024-43398) として登録されています。REXML gem をアップグレードすることを強く推奨します。 + +## 詳細 + +REXML gem は、同じローカル名の階層の深い要素を多く持つ XML ドキュメントの解析に時間がかかることがあります。 + +これは TreeParser API にのみ影響します。`REXML::Document.new` を使用して XML ドキュメントを解析する場合に影響を受ける可能性があります。 + +REXML gem を 3.3.6 以上にアップデートしてください。 + +## 影響を受けるバージョン + +* REXML gem 3.3.5 以前 + +## クレジット + +この脆弱性情報は、[l33thaxor](https://hackerone.com/l33thaxor) 氏によって報告されました。 + +## 更新履歴 + +* 2024-08-22 12:00:00 (JST) 初版 From 1513a94e0c40fa8ac376c0222f7774c704c6645f Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Wed, 4 Sep 2024 14:15:38 +0900 Subject: [PATCH 25/27] Added misisng ruby- prefix --- lib/draft-release.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/draft-release.rb b/lib/draft-release.rb index 9760fb3a05..cc48b529e9 100644 --- a/lib/draft-release.rb +++ b/lib/draft-release.rb @@ -3,7 +3,7 @@ template = File.read("lib/release-template.erb") version = ARGV[0] || "3.3.4" -output_path = "en/news/_posts/#{Time.now.strftime("%Y-%m-%d")}-#{version.gsub(/\./, "-")}-released.md" +output_path = "en/news/_posts/ruby-#{Time.now.strftime("%Y-%m-%d")}-#{version.gsub(/\./, "-")}-released.md" File.open(output_path, "w") do |file| file.write ERB.new(template).result(binding) From 2e5580871a28aa724b818e9d9a731cdacac279bb Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Wed, 4 Sep 2024 14:28:50 +0900 Subject: [PATCH 26/27] Use format-release for yaml update --- .github/workflows/draft-release.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/workflows/draft-release.yml b/.github/workflows/draft-release.yml index da662597c8..917964daa7 100644 --- a/.github/workflows/draft-release.yml +++ b/.github/workflows/draft-release.yml @@ -16,6 +16,13 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + with: + path: www + + - uses: actions/checkout@v4 + with: + repository: ruby/ruby + path: ruby - uses: ruby/setup-ruby@v1 with: @@ -25,6 +32,11 @@ jobs: run: | ruby lib/draft-release.rb ${{ github.event.client_payload.version || github.event.inputs.version }} + - name: Update data files + run: | + tool/format-release ../www ${{ github.event.client_payload.version || github.event.inputs.version }} . + working-directory: ruby + - name: Create Commit run: | git config user.name "GitHub Actions Bot" @@ -43,3 +55,5 @@ jobs: title: "Create release for ${{ github.event.client_payload.version || github.event.inputs.version }}" body: "This is an automated pull request to create a release" draft: true + + working-directory: www From 5295136bb850cf991a428249a29091ffa8a33588 Mon Sep 17 00:00:00 2001 From: Gao Jun Date: Wed, 18 Sep 2024 20:53:31 +0800 Subject: [PATCH 27/27] Translate Ruby 3.3.5 Released (zh_cn) (#3369) --- .../news/_posts/2024-09-03-3-3-5-released.md | 50 +++++++++++++++++++ 1 file changed, 50 insertions(+) create mode 100644 zh_cn/news/_posts/2024-09-03-3-3-5-released.md diff --git a/zh_cn/news/_posts/2024-09-03-3-3-5-released.md b/zh_cn/news/_posts/2024-09-03-3-3-5-released.md new file mode 100644 index 0000000000..f013b30446 --- /dev/null +++ b/zh_cn/news/_posts/2024-09-03-3-3-5-released.md @@ -0,0 +1,50 @@ +--- +layout: news_post +title: "Ruby 3.3.5 已发布" +author: k0kubun +translator: "GAO Jun" +date: 2024-09-03 06:40:00 +0000 +lang: zh_cn +--- + +Ruby 3.3.5 已发布。 + +这是包含了一些小补丁的计划更新。 +我们建议您在方便的时候尽早更新您的 Ruby 版本。 +更多信息，可以参考 [GitHub 发布说明](https://github.com/ruby/ruby/releases/tag/v3_3_5). + +## 发布计划 + +正如此前的 [公告](https://www.ruby-lang.org/zh_cn/news/2024/07/09/ruby-3-3-4-released/),我们打算在 `.1` 版本发布后，每 2 个月发布一次最新的 Ruby 稳定版本（目前是 Ruby 3.3)。 + +我们期望在11月5日发布 Ruby 3.3.6，在1月7日发布 3.3.7。如果有影响大量用户的变更，我们可能会提前发布新版本。 + +## 下载 + +{% assign release = site.data.releases | where: "version", "3.3.5" | first %} + +* <{{ release.url.gz }}> + + 文件大小: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + 文件大小: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + 文件大小: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## 发布说明 + +许多提交者、开发人员以及用户提供了问题报告，帮助我们完成了此版本。 +感谢他们的贡献。