Rails core - May 2008 - Security Problem in ActiveRecord

Cheers,


There is a major security problem in ActiveRecord. I''m the process of 
writing the tests and the fix.

This should definitely go into 2.1 and be backported to 2.0.

I''m not sure I should post the exact problem here. Could somebody from 
the core team contact me?

Jonathan

-- 
Jonathan Weiss
http://blog.innerewut.de
http://twitter.com/jweiss

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Core" group.
To post to this group, send email to rubyonrails-core@googlegroups.com
To unsubscribe from this group, send email to
rubyonrails-core-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/rubyonrails-core?hl=en
-~----------~----~----~----~------~----~------~--~---

Hi,

Could you please send the email to security@rubyonrails.org

Thanks.

On Wed, May 28, 2008 at 11:30 AM, Jonathan Weiss <jw@innerewut.de>
wrote:
>
> Cheers,
>
>
> There is a major security problem in ActiveRecord. I''m the process
of
> writing the tests and the fix.
>
> This should definitely go into 2.1 and be backported to 2.0.
>
> I''m not sure I should post the exact problem here. Could somebody
from
> the core team contact me?
>
> Jonathan
>
> --
> Jonathan Weiss
> http://blog.innerewut.de
> http://twitter.com/jweiss
>
> >
>


-- 
Cheers!
- Pratik
http://m.onkey.org

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Core" group.
To post to this group, send email to rubyonrails-core@googlegroups.com
To unsubscribe from this group, send email to
rubyonrails-core-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/rubyonrails-core?hl=en
-~----------~----~----~----~------~----~------~--~---