News>Phoenix News

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

/phoenix#ecto#security#otp#jason#pinned
josevalim

josevalim

Creator of Elixir

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

We were notified by Panagiotis Nezis that certain payloads could take a long time to process when converted to integers. New Erlang/OTP versions have been released to address this:

  • Patch Package OTP 24.3.4.13 Released
  • Patch Package OTP 25.3.2.3 Released
  • Patch Package OTP 26.0.2 Released

We recommend updating Erlang/OTP to the versions above or later. However, if it is not possible, we have also released patch versions for Jason (thanks @michalmuskala) and Ecto for your convenience. You can update to:

  • Jason v1.4.1+
  • Ecto v3.9.6+ or Ecto v3.10.3+
View thread on forum
/phoenix#ecto#security#otp#jason#pinned
28 931 0

Where Next?

View thread on forum
phoenix
ecto
security
otp
jason
pinned
Home News>Phoenix News
/phoenix#ecto#security#otp#jason#pinned
28 935 0
Last post

Popular in Phoenix News Top

chrismccord
News>Phoenix News

Phoenix 1.7.0 final is out!
The final release of Phoenix 1.7 is out! Most of the new features have been outlined in the 1.7 RC thread, but it has been a few months s...
/phoenix#phoenix-announcement
327 9949 42
New
AstonJ
News>Phoenix News

About the Phoenix News category
Phoenix News Section
/phoenix
0 1254 2
New
chrismccord
News>Phoenix News

Security Releases for Phoenix
A minor vulnerability has been disclosed for applications redirecting to URLs provided by user input. Only applications passing user inpu...
/phoenix#phoenix-security#pinned
15 7364 0
New
chrismccord
News>Phoenix News

Phoenix 1.4.0 released!
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
/phoenix#phoenix-release
688 30048 115
New
chrismccord
News>Phoenix News

Phoenix 1.6.0-rc.0 released!
I’m pleased to announce the first release candidate of Phoenix 1.6.0 has landed on the heels of a fresh LiveView 0.16 release! This relea...
/phoenix#phoenix-announcement
402 13728 90
New
chrismccord
News>Phoenix News

Phoenix 1.7.2 released
Announcement post dup’d here for convenience: Phoenix 1.7.2 is out! This minor release includes a couple features worth talking about. ...
/phoenix#phoenix-release
139 4066 9
New
chrismccord
News>Phoenix News

Phoenix v1.5.0 released!
This release brings a number of exciting features, including integration with the new Phoenix LiveDashboard and Phoenix LiveView. There h...
/phoenix#phoenix-release
379 28447 94
New
chrismccord
News>Phoenix News

Phoenix v1.3.0-rc.0 released
As promised, the first release candidate of Phoenix 1.3.0 is out! This release focuses on code generators with improved project structure...
/phoenix#phoenix-release
434 29347 97
New
chrismccord
News>Phoenix News

Phoenix 1.7.0-rc.0 is out!
You can read the announcement on the blog, but I’ll dup most of it here for discussion purposes: ––––––––––––––––––––––––––––––––––––––...
/phoenix#phoenix-announcement
451 13182 109
New
chrismccord
News>Phoenix News

Phoenix 1.8.0-rc.0 released!
Check the announcement blog for details! Blog duped here for convenience: Phoenix 1.8.0-rc released! The first release candidate of P...
/phoenix#phoenix-release
414 11568 167
New

Other popular topics Top

Qqwy
Blogs & Podcasts>Blog Posts

Elixir Blog Posts
Update: How to use the Blogs & Podcasts section You can post links to your blog posts or podcasts either in one of the Official Blog...
hexdocs.pm
#blog-posts#wiki#stickies#official-blog-posts-thread
3268 119930 1237
New
fireproofsocks
Questions & Help>Questions

Defining Ecto Schemas (PostGres) to use NOT NULL in column definitions
I’m working on defining a simple Ecto schema for a table (in PostGres), but I don’t see where I can define a column as NOT NULL. Conside...
#ecto
29 14078 4
New
jononomo
Questions & Help>Questions

Where / How does the Mix environment variable get set?
I am trying to figure out how Mix knows whether the environment is test, dev, or prod -- where is this set? Thanks.
#mix
31 22791 9
New
chrismccord
News>Phoenix News

Phoenix 1.4.0 released!
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
/phoenix#phoenix-release
688 30048 115
New
dotdotdotPaul
Questions & Help>Questions

Ecto: Validating belongs_to association is not nil?
Okay, I'm having a heck of a time trying to figure out how to best handle the validation of belongs_to associations in Ecto. I'm sure I'...
#ecto
29 17806 25
New
Tee
Questions & Help>Questions

Enumerables - how does Enum.reduce work with maps
can someone please explain to me how Enum.reduce works with maps
#erlang
18 14675 13
New
script
Questions & Help>Questions

Removing spaces and characters from string
If I have a string “1000 cfu/ml” . I want to remove the characters and / and space . So the string is like this "1000" What is the ...
#regex
11 14427 2
New
myronmarston
Questions & Help>Questions

Typespecs - best way to spec keyword lists?
The Elixir Typespec docs show the following syntax for keyword lists in typespecs: # ... | [key: type] # keyword lis...
#dialyzer
52 14258 3
New
mgjohns61585
Questions & Help>Questions

Convert a string to an integer?
Could someone help me? I'm making my first elixir program, number guessing game. I can't figure out how to convert the user's guess from ...
#how-to-question
3 14200 6
New
ovidiubadita
Questions & Help>Questions

Elixir for game development
Hey all, I discovered Elixir and I love it. I always wanted to learn a functional programming and I intended to go for Haskell, but afte...
#game
30 23202 25
New
Back to top

Latest Phoenix Threads

Phoenix Forum ❯

News>Phoenix News

News Phoenix News ❯

Latest on Elixir Forum

Elixir Forum ❯

Sponsor Spotlight

Dashbit

Build Elixir applications with speed and confidence.

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Manning

Develop your skills with books, videos, and courses.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Forums

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Manning

Develop your skills with books, videos, and courses.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement