Another RoR Vulnerability

[lcver]

Micrmsoft blog(not affiliated with Microsoft): CVE-2013-0333 - Ruby On Rails: JSON Parser Derailed

I'll be sleeping soundly while you guys spend the next few sleepless days updating your servers.

Have a good weekend bros.

 

[dchuk]

it's actually a YAML vulnerability which is entirely separate of RoR but cool story bro. Show me any framework without vulnerabilities and I'll mail you some brownies.

 

[lcver]

I don't use any frameworks, so I wouldn't know of any.

 

[Mahzkrieg]

Micrmsoft blog(not affiliated with Microsoft): CVE-2013-0333 - Ruby On Rails: JSON Parser Derailed

I'll be sleeping soundly while you guys spend the next few sleepless days updating your servers.

Have a good weekend bros.

Sleep well my friend.

$ gem update rails

:banana_sml:

 

[dchuk]

I don't use any frameworks, so I wouldn't know of any.

Oh you're one of those elite coders who doesn't believe in reusing code

 

[eliquid]

even I use a framework, and I write in PHP

 

[mattseh]

even I use a framework, and I write in PHP

Yes JB, but most people don't refer to what you write as code

 

[eliquid]

^^ your right, because mine is designed for making money.. not indenting white space and spawning zombie processes that you have to manually kill in ssh terminals

 

[dchuk]

OH SNAP

 

[chigga102]

The Programmer Equivalent of hand bangs are coming out!