CINXE.COM

<!DOCTYPE html> <html> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("https://web.archive.org/web"); __wm.wombat("https://www.ruby-lang.org/pt/security/","20240802231837","https://web.archive.org/","web","/_static/", "1722640717"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <meta charset="utf-8"> <title>Segurança</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta itemprop="image" content="https://web.archive.org/web/20240802231837im_/https://www.ruby-lang.org/images/header-ruby-logo@2x.png"> <meta name="description" content=""> <link rel="stylesheet" type="text/css" href="/web/20240802231837cs_/https://www.ruby-lang.org/stylesheets/normalize.css"> <link rel="stylesheet" type="text/css" href="/web/20240802231837cs_/https://www.ruby-lang.org/stylesheets/main.css"> <link rel="stylesheet" type="text/css" href="/web/20240802231837cs_/https://www.ruby-lang.org/stylesheets/pygments.css"> <link rel="stylesheet" type="text/css" href="/web/20240802231837cs_/https://www.ruby-lang.org/stylesheets/mobile.css"> <link rel="stylesheet" type="text/css" href="/web/20240802231837cs_/https://www.ruby-lang.org/stylesheets/print.css"> <link href="https://web.archive.org/web/20240802231837cs_/https://fonts.googleapis.com/css?family=Noto+Sans:400,700,400italic,700italic&subset=latin,cyrillic,greek,vietnamese" rel="stylesheet" type="text/css"> <link rel="canonical" href="https://web.archive.org/web/20240802231837/https://www.ruby-lang.org/pt/security/"> <link rel="shortcut icon" type="image/x-icon" href="/web/20240802231837im_/https://www.ruby-lang.org/favicon.ico"> <link href="/web/20240802231837/https://www.ruby-lang.org/pt/feeds/news.rss" rel="alternate" title="Em português" type="application/rss+xml"> <script type="text/javascript" src="/web/20240802231837js_/https://www.ruby-lang.org/javascripts/jquery.min.js"></script> <script type="text/javascript" src="/web/20240802231837js_/https://www.ruby-lang.org/javascripts/page.js"></script> </head> <body> <div id="header"> <div id="header_content" class="container"> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/"> <h1>Ruby</h1> <h2>O melhor amigo do programador</h2> </a> <div class="site-links"> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/" class="home">Início</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/downloads/">Downloads</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/documentation/">Documentação</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/libraries/">Módulos</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/community/">Comunidade</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/">Notícias</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/security/">Segurança</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/about/">Sobre Ruby</a> <a href="#" class="menu selected">Menu</a> </div> <div id="search-box"> <form id="search-form" action="https://web.archive.org/web/20240802231837/https://www.google.com/cse"> <table class="fieldset"> <tr> <td> <input class="field" type="text" name="q" size="31" style="background: white url(//web.archive.org/web/20240802231837im_/https://www.google.com/coop/intl/pt/images/google_custom_search_watermark.gif) left no-repeat" onfocus="this.style.background='white'" onblur="if (/^\s*$/.test(this.value)) this.style.background='white url(//www.google.com/coop/intl/pt/images/google_custom_search_watermark.gif) left no-repeat'"/> </td> <td> <input type="hidden" name="cx" value="013598269713424429640:g5orptiw95w"/> <input type="hidden" name="ie" value="UTF-8"/> <input class="button" type="submit" name="sa" value="Procurar"/> </td> </tr> </table> </form> </div> </div> </div> <div id="page"> <div id="main-wrapper" class="container"> <div id="main"> <div id="content-wrapper"> <h1>Segurança</h1> <div id="content"> <p class="summary">Aqui você encontrará informações sobre problemas de segurança do Ruby.</p> <h2>Reportando Vulnerabilidades de Segurança</h2> <p>Vulnerabilidades de segurança devem ser reportadas por e-mail para o endereço security@ruby-lang.org (<a href="/web/20240802231837/https://www.ruby-lang.org/security.asc">a chave pública PGP</a>), que é uma lista de e-mails privada. Os problemas reportados serão publicados após as correções.</p> <p>Os membros da lista de e-mails são pessoas que mantém o Ruby (committers do Ruby e autores de outras implementações do Ruby, distribuidores, e plataformas PaaS). Os membros precisam ser pessoas individuais, outras listas de e-mail não são permitidas.</p> <h2>Problemas conhecidos</h2> <p><em>See the <a href="/web/20240802231837/https://www.ruby-lang.org/en/security/">English page</a> for a complete and up-to-date list of security vulnerabilities. The following list only includes the as yet translated security announcements, it might be incomplete or outdated.</em></p> <p>Estes são os problemas recentes:</p> <ul> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/">CVE-2021-33621: HTTP response splitting na CGI</a><br/>2022-11-22</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2020/09/29/http-request-smuggling-cve-2020-25613/">CVE-2020-25613: Potencial Vulnerabilidade de Smuggling de Requisições HTTP no WEBrick</a><br/>2020-09-29</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2019/10/01/webrick-regexp-digestauth-dos-cve-2019-16201/">CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick's Digest access authentication</a><br/>2019-10-01</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2019/08/28/multiple-jquery-vulnerabilities-in-rdoc/">Múltiplas vulnerabilidades de jQuery em RDoc</a><br/>2019-08-28</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2019/03/05/multiple-vulnerabilities-in-rubygems/">Múltiplas vulnerabilidades em RubyGems</a><br/>2019-03-05</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2017/12/14/net-ftp-command-injection-cve-2017-17405/">CVE-2017-17405: Vulnerabilidade de injeção de comandos em Net::FTP</a><br/>2017-12-14</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2017/09/14/json-heap-exposure-cve-2017-14064/">CVE-2017-14064: Vulnerabilidade de exposição de heap no JSON gerado</a><br/>2017-09-14</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/2017/08/29/multiple-vulnerabilities-in-rubygems/">Múltiplas vulnerabilidades no RubyGems</a><br/>2017-08-29</li> </ul> <p>Consulte a <a href="/web/20240802231837/https://www.ruby-lang.org/en/security/">página em inglês</a> para os posts relacionados à segurança mais antigos.</p> </div> </div> <hr class="hidden-modern"/> <div id="sidebar-wrapper"> <div id="sidebar"> <div class="navigation"> <h3><strong>Primeiros passos</strong>, é fácil!</h3> <ul class="menu"> <li><a href="https://web.archive.org/web/20240802231837/https://try.ruby-lang.org/">Try Ruby! (in your browser)</a></li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/documentation/quickstart/">Ruby em Vinte Minutos</a></li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/documentation/ruby-from-other-languages/">Ruby a partir de outras linguagens</a></li> </ul> </div> <div class="navigation"> <h3><strong>Explore</strong> um novo mundo…</h3> <ul class="menu"> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/documentation/">Documentação</a></li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/libraries/">Bibliotecas</a></li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/documentation/success-stories/">Histórias de sucesso</a></li> </ul> </div> <div class="navigation"> <h3><strong>Participe</strong> de uma comunidade simpática e em crescimento.</h3> <ul> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/community/mailing-lists/">Listas de E-mail</a>: Fale sobre Ruby com programadores de todo o mundo.</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/community/user-groups/">Grupos de Usuários</a>: Entre em contato com colegas da sua área.</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/community/weblogs/">Weblogs</a>: Leia sobre o que está acontecendo agora na comunidade Ruby.</li> <li><a href="/web/20240802231837/https://www.ruby-lang.org/pt/community/ruby-core/">Ruby Core</a>: Ajude a polir as arestas da última versão do Ruby.</li> <li><a href="https://web.archive.org/web/20240802231837/https://bugs.ruby-lang.org/">Issue Tracking</a>: Informe ou ajude a resolver problemas do Ruby.</li> </ul> </div> <h3>Feeds de notícias (RSS)</h3> <p><a href="/web/20240802231837/https://www.ruby-lang.org/pt/feeds/news.rss">Em português</a></p> </div> </div> <hr class="hidden-modern"/> </div> </div> </div> <div class="container"> <div id="footer"> <div class="site-links"> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/" class="home">Início</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/downloads/">Downloads</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/documentation/">Documentação</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/libraries/">Módulos</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/community/">Comunidade</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/news/">Notícias</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/security/">Segurança</a> <a href="/web/20240802231837/https://www.ruby-lang.org/pt/about/">Sobre Ruby</a> </div> <p> Este site em outros idiomas: <a href="/web/20240802231837/https://www.ruby-lang.org/bg/">Български</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/de/">Deutsch</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/en/">English</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/es/">Español</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/fr/">Français</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/id/">Bahasa Indonesia</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/it/">Italiano</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/ja/">日本語</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/ko/">한국어</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/pl/">polski</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/pt/">Português</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/ru/">Русский</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/tr/">Türkçe</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/vi/">Tiếng Việt</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/zh_cn/">简体中文</a>, <a href="/web/20240802231837/https://www.ruby-lang.org/zh_tw/">繁體中文</a>. </p> <p><a href="/web/20240802231837/https://www.ruby-lang.org/pt/about/website/">Este website</a> é mantido com orgulho por membros da comunidade Ruby.</p> </div> </div> </body> </html>