mirror of
https://github.com/seigler/dash-docs
synced 2025-07-27 09:46:12 +00:00
7d98f798ab
Gemfile:
- Upgrade to Jekyll 3.x (3.0.1 tested). This brings several new
features I want to use, most notably *collections* which allows us
to add blog-like collections. I've converted the `_releases` and
`_alerts` pages into collections, although their plugins are
maintained to handle the Download and Active Alert features.
- Upgrade to latest Kramdown.
- Lock Less at 2.4.0. This prevents breaking our Less plugin. Jekyll
3.x provides native support for SCSS, so we may want to switch to
that in time.
- Lock HTML Proofer at 2.1.0. The most recent version was taking
forever to check our pages (I never actually got it to complete).
I'll look into it when I get more time.
Makefile:
- New `make clean` command. Jekyll 3.x by default attempts to do
incremental rebuilds. The new `jekyll clean` command cleans up the
metadata necessary for than so that a full build is performed, and
this new `make clean` command is a wrapper around it so that we
automatically do full rebuilds in the relevant cases. Note: our
plugins aren't fully compatible with the incremental rebuilds, but
I'd like to fix that in the future.
- Remove WEBrick hack to enable previewing with default URL paths (/
instead of /index.html).
- Filter out compliants from Rouge
README.md:
- Now that Alerts (_alerts) are part of a collection, the file names
are no longer parsed for dates, so instructions on adding the date
to the YAML metadata have been added.
_alerts/*:
- Now that alerts are part of a collection, the file names are no
longer parsed to provide dates, so a `date:` field has been added to
the YAML metadata.
_config.yml:
- Some variables renamed per upgrade instructions.
- Switched from old default syntax highlighter Pygments to new default
Rouge. I tried to use Rouge options to keep new output as similar
to old output as possible to making diffing easy, but Rouge adds
extra CSS class info.
- Move `_alerts` and `_releases` into Jekyll 3.x "collections", which
provide the organizational features we were using plugins to
manange. I haven't removed the old plugins because we still use
some of their features (alerts.rb provides active issue and banner
features; releases.rb provides info to Download page)
- _layouts/* can no longer provide default global metadata; that is now
provided in the new `defaults:` section in _config.yml.
_layouts/*:
- Default metadata can no longer be provided in the layout files for
collections, so I've removed it and left a message to see
_config.yml.
_plugins/*:
- Remove filter_for.rb. It's completely broken on Jekyll 3.x because
of changes to Liquid which prevent adding new arguments to the
inherited Liquid::For class. Existing uses of filter_for have been
migrated to built-in for loops prefaced by sorts.
- Remove remove-html-extension.rb: at it said in the comments, this
was a temporary hack to get us to Jekyll 3.0.
_releases/*:
- Rename all the files: prefix a v to the file name so the output html
(e.g. v10.0.0.html) is the same as the source filename (e.g.
v10.0.0.md). This is necessary to migrate them to a Jekyll collection.
- Remove %v from titles: we have to explicitly set the title, like we
used to. Again required for migration to collections.
_templates/events.html & en/rss/events.rss:
- Sort events by date and then loop with regular for loop rather than
filter_for
en/alerts.html & en/rss/alerts.rss:
- Sort alerts by date and then loop with regular for loop rather than
filter_for
en/bitcoin-core/index.md & en/version-history.html & en/rss/releases.rss:
- Sort alerts by date and then loop with regular for loop rather than
filter_for
232 lines
15 KiB
HTML
232 lines
15 KiB
HTML
---
|
||
title: "Potentially Critical Security Vulnerability"
|
||
shorturl: "critfix"
|
||
active: false
|
||
banner: ""
|
||
date: 2012-03-16
|
||
---
|
||
<p>
|
||
A potential security vulnerability has been discovered in the Windows
|
||
version of Bitcoin-Qt. If you are running Bitcoin-Qt versions 0.5
|
||
through 0.6 on Windows you should shut it down and upgrade to either
|
||
version 0.5.3.1 or 0.6rc4 NOW.
|
||
</p><p>
|
||
The command-line bitcoin daemon (bitcoind), Mac and Linux versions of
|
||
Bitcoin-Qt, and versions prior to 0.5 are not affected.
|
||
</p><p>
|
||
Due to the nature of the vulnerability, we believe it would be very
|
||
difficult for an attacker to do anything more than crash the
|
||
Bitcoin-Qt process. However, because there is a possibility of such a
|
||
crash causing remote code execution we consider this a critical issue.
|
||
</p><p>
|
||
If you have any questions, feel free to drop by <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">
|
||
the #bitcoin-dev channel</a> on Freenode IRC.
|
||
</p><p>
|
||
You can download updated binaries from SourceForge:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 for Windows and 0.5.3 for Linux</a>
|
||
</p>
|
||
|
||
<h3 id="spanish">Español: Vulnerabilidad de seguridad (potencialmente crítica)</h3>
|
||
<p>
|
||
Una vulnerabilidad de seguridad posible no son afectadas en la versión Windows de Bitcoin-Qt. Si está utilizando Bitcoin-Qt 0.5 a través de las versiones 0.6 en Windows, debe cerrar y actualizar a la versión 0.5.3.1 o 0.6rc4 AHORA.
|
||
</p><p>
|
||
El daemon de la línea de comandos (bitcoind), las versiones Mac y Linux de Bitcoin-Qt, y las versiones anteriores a 0.5 no son afectadas.
|
||
</p><p>
|
||
Debido a la naturaleza de la vulnerabilidad, creemos que sería muy difícil para un atacante para hacer algo más que chocar Bitcoin-Qt. Sin embargo, debido a que existe la posibilidad causaría la ejecución remota de código consideramos este un tema crítico.
|
||
</p><p>
|
||
Si tiene alguna pregunta, venga al canal <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">#bitcoin-dev</a> en Freenode.
|
||
</p><p>
|
||
Puede descargar los archivos binarios actualizados desde SourceForge:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6rc</a><br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 para Windows y 0.5.3 para Linux</a>
|
||
</p>
|
||
|
||
<h3 id="german">Deutsch: DRINGEND: Windows Bitcoin-Qt update</h3>
|
||
<p>
|
||
Es wurde eine potenzielle Schwachstelle in der Windowsversion Qt-Bitcoin entdeckt. Wenn Sie mit Bitcoin-Qt-Versionen 0.5 bis 0.6 unter Windows arbeiten, sollten Sie das Programm beenden und ein Upgrade auf entweder Version 0.5.3.1 oder 0.6rc4 JETZT durchführen.
|
||
</p><p>
|
||
Der Kommandozeilen-Bitcoin Daemon (bitcoind), Mac-und Linux-Versionen Bitcoin-Qt-Versionen vor und 0.5 sind nicht betroffen.
|
||
</p><p>
|
||
Aufgrund der Art der Schwachstelle glauben wir, das es sehr schwer wäre mehr als einen Absturz des Bitcoin-Qt Prozesses zu bewirken.
|
||
Nachdem jedoch eine theoretische Möglichkeit eine "Remote Code Execution" besteht erachten wir das als einen kritischen Fall.
|
||
</p><p>
|
||
Wenn Sie noch Fragen haben, kommen sie in <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">
|
||
#bitcoin-dev Kanal</a> auf FreeNode IRC.
|
||
</p><p>
|
||
Binärdateien sind auf SourceForge verfügbar:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 für Windows und 0.5.3 für Linux</a>
|
||
</p>
|
||
|
||
<h3 id="dutch">Nederlands: Mogelijk kritisch veiligheidsprobleem</h3>
|
||
<p>
|
||
Er is een een mogelijk veiligheidsprobleem gevonden in de Windows versie van
|
||
Bitcoin-Qt. Als u Bitcoin-Qt versie 0.5 tot 0.6 draait, sluit het dan af
|
||
en upgrade naar versie 0.5.3.1 of 0.6rc4 NU.
|
||
</p><p>
|
||
De commandolijn bitcoin daemon (bitcoind), en de Mac of de Linux versie van
|
||
Bitcoin-Qt en versie voor 0.5 zijn niet kwetsbaar.
|
||
</p><p>
|
||
Omwille van het soort veiligheidsprobleem geloven wij dat het zeer
|
||
moeilijk zou zijn voor een aanvaller om iets anders te doen dan het
|
||
Bitcoin-Qt proces te doen crashen. Echter, aangezien er een mogelijkheid
|
||
is tot het uitvoering van code, beschouwen we dit als
|
||
een kritisch probleem.
|
||
</p><p>
|
||
Indien u enige vragen heeft, kom gerust langs op het <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">
|
||
het #bitcoin-dev kanaal</a> op Freenode IRC.
|
||
</p><p>
|
||
U kan een aangepaste versie downloaden op SourceForge:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 voor Windows en 0.5.3 for Linux</a>
|
||
</p>
|
||
|
||
<h3 id="russian">Русский: Найдена потенциальная критическая уязвимость в версиях Bitcoin-Qt от 0.5 до 0.6 для Windows</h3>
|
||
<p>
|
||
Найдена потенциальная критическая уязвимость в версиях Bitcoin-Qt от 0.5 до 0.6 для Windows. Если вы используете одну из этих версий, отключите её и обновитесь до 0.5.3.1 или 0.6rc4 немедленно.
|
||
</p><p>
|
||
Версия для командной строки, версии до 0.5, а также версии для Linux и MacOS не подвержены этой уязвимости.
|
||
</p><p>
|
||
Из-за сути проблемы мы считаем что злоумышленнику будет сложно сделать что-либо помимо завершения процесса Bitcoin-Qt с ошибкой, но поскольку есть теоретическая вероятность что это может вызвать удалённое выполнение кода, мы считаем эту уязвимость критической.
|
||
</p><p>
|
||
Если у вас есть какие-либо вопросы, обращайтесь на канал <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">
|
||
#bitcoin-dev</a> сети Freenode.
|
||
</p><p>
|
||
Вы можете скачать обновлённые выполняемые файлы с SourceForge:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 RC</a><br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1</a>
|
||
</p>
|
||
|
||
<h3 id="italian">Italiano: Potenziale vulnerabilità di sicurezza critica.</h3>
|
||
<p>
|
||
Una potenziale vulnerabilità di sicurezza è stata scoperta nella versione di Windows di Bitcoin-Qt. Se stai usando Bitcoin-Qt su Windows dalle versioni 0.5 alla 0.6 dovresti chiuderla e aggiornarla alle versioni 0.5.3.1 o 0.6rc4 ORA.
|
||
</p><p>
|
||
La versione di Bitcoin a linea di comando (bitcoind), le versioni Mac e Linux di Bitcoin-Qt, e le versioni precedenti alla 0.5 non sono affette dal problema.
|
||
</p><p>
|
||
Vista la natura della vulnerabilità, crediamo sia molto difficile che un attacco posso fare niente di più del crashare il processo Bitcoin-Qt. Tutta via, visto che c'è la possibilità che questo crash possa causare l'esecuzione di codice remoto lo consideriamo come critico.
|
||
</p><p>
|
||
Per qualunque domanda, sentitevi liberi di venire <a href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">sul canale #bitcoin-dev</a> su Freenode IRC.
|
||
</p><p>
|
||
Potete scaricare le versioni aggiornate da SourceForge: <br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidate</a><br><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.2 per Windows e 0.5.3 per Linux</a>
|
||
</p>
|
||
|
||
<h3 id="portugese">Português: Vulnerabilidade de segurança potencialmente crítica</h3>
|
||
<p>
|
||
Uma vulnerabilidade de segurança em potencial foi descoberto na versão do Bitcoin-Qt para Windows. Se você estiver executando alguma versão entre a 0.5 até a 0.6 do Bitcoin-Qt no Windows, você deve desligá-lo e atualizá-lo para a versão 0.5.3.1 ou 0.6rc4 AGORA!
|
||
</p><p>
|
||
A versão em linha de comando do Bitcoin (bitcoin daemon - bitcoind), as versões para Mac e Linux do Bitcoin-Qt, e versões anteriores a 0.5 não são afetadas.
|
||
</p><p>
|
||
Devido à natureza da vulnerabilidade, acreditamos que seria muito difícil para um atacante conseguir fazer qualquer coisa além de travar o programa Bitcoin-Qt. No entanto, como há uma possibilidade de tal acidente causar uma execução de código remota, nós consideramos esta uma questão crucial.
|
||
</p><p>
|
||
Se você tem qualquer questionamento, sinta-se livre para entrar no canal <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">
|
||
#bitcoin-dev</a> no servidor IRC em Freenode.
|
||
</p><p>
|
||
Você poderá instalar os novos binários a partir do SourceForge:<br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 para Windows e 0.5.3 para Linux</a>
|
||
</p><p>
|
||
Traduzido por Thiago Martins (ThiagoCMC)
|
||
</p>
|
||
|
||
<h3 id="polish">Polski: Potencjalnie Krytyczne Zagrozenie Bezpieczenstwa</h3>
|
||
<p>
|
||
Potencjalne zagrozenie zostalo odkryte w Bitcoin-QT wersji Windows. Jesli masz uruchomiony Bitcoin-Qt w wersjach 0.5 przez 0.6 w wersji Windows powinienes je zamknac i pobrac najnowsze wersje 0.5.3.1 lub 0.6rc4 TERAZ.
|
||
</p><p>
|
||
Demon bitcoin z linni polecen(bitcoind), wersje MAC i Linux Bitcoin-QT, i wersje ponizej 0.5 nie sa zagrozone.
|
||
</p><p>
|
||
Z wzgeldu na nature zagrozenia, wierzymy ze osoba atakujaca miala by spory problem z zrobieniem czego kolwiek innego niz zawieszenie procesu Bitcoin-QT. Jednak, jest mozliwosc ze takie zawieszenie procesu moglo by doprowadzic do zdalenego odpalenia kodu uwazamy je za krytyczne.
|
||
</p><p>
|
||
Jesli masz jakie kolwiek pytania kieruj je na kanal <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">#bitcoin-dev</a> IRC Freenode.
|
||
</p><p>
|
||
Mozesz sciagnac zrodlo z SourceForge:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 dla WIndows i 0.5.3 dla Linuxa</a>
|
||
</p>
|
||
|
||
<h3 id="bulgarian">Български език: Уязвимост в сигурността.</h3>
|
||
<p>
|
||
Уязвимост в сигурността бе открита при Windows версията на Bitcoin-Qt.Ако използвате Bitcoin-Qt версия 0.5 до 0.6 през Windows,ще се наложи да я спрете и да направите ъпгрейд до 0.5.3.1 или 0.rc4.Command-line даемон-а(bitcoind),няма да бъде афектиран за потребители на Mac или Linux.Поради вида на тази уязвимост,ние вярваме,че би могло да бъде доста трудно за атакуващия да направи нещо повече от това да crash-не процесът - Bitcoin-Qt.Поради това ние го считаме за критичен проблем.
|
||
</p><p>
|
||
Ако имате някъкви въпроси,не се притеснявайте да ги зададете в <a
|
||
href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">
|
||
#Bitcoin-dev @freenode</a>.
|
||
</p><p>
|
||
Можете да изтеглите ъпдейтите от Sourceforge:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br /><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 за Windows и 0.5.3 за Linux.</a>
|
||
</p>
|
||
|
||
<h3 id="greek">Ελληνικά: Σοβαρό πρόβλημα ασφάλειας</h3>
|
||
<p>
|
||
Ένα πιθανά σοβαρό πρόβλημα ασφάλειας εντοπίστηκε στην έκδοση Windows του Bitcoin-Qt. Εαν χρησιμοποιείτε Bitcoin-Qt εκδόσεις 0.5 έως 0.6 στα Windows, αναβαθμήστε <b>άμεσα</b> σε έκδοση 0.5.3.1 ή 0.6rc4.
|
||
</p><p>
|
||
Ο δαίμονας bitcoind, οι εκδόσεις Mac, Linux του bitcoin-Qt, και εκδόσεις παλαιότερες της 0.5 δεν επηρεάζονται απο το πρόβλημα.
|
||
</p><p>
|
||
Λόγω της φύσης του προβλήματος, πιστεύουμε οτι είναι σχεδόν απίθανο κάποιος εισβολέας να καταφέρει οτιδήποτε περισσότερο απο το να κλείσει το Bitcoin-Qt. Παρ'όλα αυτά, επειδή κάτι τέτοιο θα μπορούσε να οδηγήσει σε απομακρυσμένη εκτέλεση κώδικα, θεωρούμε το συγκεκριμένο πρόβλημα πολύ σοβαρό.
|
||
</p><p>
|
||
Για οποιαδήποτε απορία μπορείτε να επισκευθείτε το κανάλι <a href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">#bitcoin-dev</a> στο IRC (Freenode).
|
||
</p><p>
|
||
Μπορείτε να κατεβάσετε νέες εκδόσεις απο το SourceForge:<br />
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 για Windows και 0.5.3 για Linux</a>
|
||
</p>
|
||
|
||
<h3 id="swedish">Svenska: Potentiellt kritiskt säkerhetshål</h3>
|
||
<p>
|
||
Ett potentiellt kritiskt säkerhetshål har upptäckts i Windowsversionen av Bitcoin-QT. Om du kör Bitcoin-QT i någon av versionerna 0.5 t.o.m. 0.6 för Windows så bör du stänga av programmet och uppgradera till version 0.5.3.1 eller 0.6rc4 OMGÅENDE.
|
||
</p><p>
|
||
Kommandoradsprogrammet Bitcoin daemon (bitcoind), Mac- och Linuxversionerna av Bitcoin-QT samt tidigare versioner än 0.5 påverkas ej.
|
||
</p><p>
|
||
P.g.a. den typ av sårbarhet det handlar om tror vi att det skulle vara mycket svårt för en angripare att göra något att än att krascha Bitcoin-QT-processen, men eftersom det finns en risk att en sådan krasch kan orsaka "remote code execution" betraktar vi detta som ett kritiskt säkerhetshål.
|
||
</p><p>
|
||
Om du har några frågor är du välkommen in på kanalen <a href="http://webchat.freenode.net/?channels=bitcoin-dev&uio=d4">#bitcoin-dev</a> på Freenode IRC.
|
||
</p><p>
|
||
Du kan ladda ner uppdaterade binärer från SourceForge:<br/>
|
||
<a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.6.0/test/">
|
||
0.6 Release Candidates</a><br><a
|
||
href="http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.5.3/">
|
||
0.5.3.1 för Windows och 0.5.3 för Linux</a>
|
||
</p>
|
||
|
||
<div style="text-align:right">
|
||
<i>This notice last updated: Fri, 16 Mar 2012 22:58:00 UTC</i>
|
||
</div>
|