Multiple Ruby Vulnerabilities Serious Concern for Developers
The scripting language Ruby has been quite popular among database application developers since Ruby on Rails came out and alleviated a lot of the drudgery of db application development. A recent announcement about multiple vulnerabilities that can be exploited for denial of service attacks or arbitrary code execution is leaving developers scrambling to patch but there are questions about the patches.
There has been some question on the Ruby Formum about the fixes with at least one poster finding a test suite fails after applying a segment fault patch to version 1.8.6-p230, others indicate the patch is working.
The vulnerabilities were discovered by Drew Yao from Apple Product Security. Patches are available at here. There is more discussion on this at Matasano Chargen.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
