Denial of service attack was found for Ruby's Hash algorithm (CVE-2011-4815)

Impact

This is something related to computational complexity. Specially crafted series of strings that intentionally collide their hash values each other was found. With such sequences an attacker can issue a denial of service attack by, for instance, giving them as POST parameters of HTTP requests for your Rails application.

Continue Reading…

Ruby 1.9.3 p0 is released

Ruby 1.9.3 p0 is released. This is the latest stable version of 1.9 series.

See ChangeLogs and NEWS for the descriptions.

Continue Reading…

Other News

More News…