News>Phoenix News

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

/phoenix#ecto#security#otp#jason#pinned
josevalim

josevalim

Creator of Elixir

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

We were notified by Panagiotis Nezis that certain payloads could take a long time to process when converted to integers. New Erlang/OTP versions have been released to address this:

  • Patch Package OTP 24.3.4.13 Released
  • Patch Package OTP 25.3.2.3 Released
  • Patch Package OTP 26.0.2 Released

We recommend updating Erlang/OTP to the versions above or later. However, if it is not possible, we have also released patch versions for Jason (thanks @michalmuskala) and Ecto for your convenience. You can update to:

  • Jason v1.4.1+
  • Ecto v3.9.6+ or Ecto v3.10.3+
View thread on forum
/phoenix#ecto#security#otp#jason#pinned
28 931 0

Where Next?

View thread on forum
phoenix
ecto
security
otp
jason
pinned
Home News>Phoenix News
/phoenix#ecto#security#otp#jason#pinned
28 935 0
Last post

Popular in Phoenix News Top

chrismccord
News>Phoenix News

Phoenix LiveView 1.0.0-rc.0 is out!
LiveView 1.0.0-rc.0 is out! This 1.0 milestone comes almost six years after the first LiveView commit. I published a Phoenix blog highli...
/phoenix#liveview
353 7107 48
New
chrismccord
News>Phoenix News

Phoenix 1.4.0 released!
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
/phoenix#phoenix-release
688 30048 115
New
AstonJ
News>Phoenix News

About the Phoenix News category
Phoenix News Section
/phoenix
0 1254 2
New
chrismccord
News>Phoenix News

Phoenix 1.6.0-rc.0 released!
I’m pleased to announce the first release candidate of Phoenix 1.6.0 has landed on the heels of a fresh LiveView 0.16 release! This relea...
/phoenix#phoenix-announcement
402 13728 90
New
josevalim
News>Phoenix News

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies
We were notified by Panagiotis Nezis that certain payloads could take a long time to process when converted to integers. New Erlang/OTP v...
/phoenix#ecto#security#otp#jason#pinned
28 930 0
New
chrismccord
News>Phoenix News

Phoenix v1.5.0 released!
This release brings a number of exciting features, including integration with the new Phoenix LiveDashboard and Phoenix LiveView. There h...
/phoenix#phoenix-release
379 28447 94
New
chrismccord
News>Phoenix News

Phoenix 1.7.2 released
Announcement post dup’d here for convenience: Phoenix 1.7.2 is out! This minor release includes a couple features worth talking about. ...
/phoenix#phoenix-release
139 4066 9
New
chrismccord
News>Phoenix News

Phoenix 1.3, 1.4, 1.5, and 1.6 security releases for wildcard check_origin vulnerability
Phoenix 1.3.5, 1.4.18, 1.5.14, and 1.6.14 have been released to resolve a vulnerability in wildcard check_origin configurations. Previou...
/phoenix#phoenix-security
69 2975 4
New
chrismccord
News>Phoenix News

Phoenix v1.3.0-rc.0 released
As promised, the first release candidate of Phoenix 1.3.0 is out! This release focuses on code generators with improved project structure...
/phoenix#phoenix-release
434 29347 97
New
chrismccord
News>Phoenix News

Phoenix 1.7.0-rc.0 is out!
You can read the announcement on the blog, but I’ll dup most of it here for discussion purposes: ––––––––––––––––––––––––––––––––––––––...
/phoenix#phoenix-announcement
451 13182 109
New

Other popular topics Top

chrismccord
News>Phoenix News

Phoenix 1.4.0 released!
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
/phoenix#phoenix-release
688 30048 115
New
yurko
Chat & Discussions>Wikis

Elixir apps as systemd services - info & wiki
Here are few pieces of (common) Linux knowledge that we use for reasonably small one server apps. We use Ubuntu but this should work for ...
#wiki#deployment#linux
73 19423 25
New
_russellb
Questions & Help>Questions

Web scraping tools
I want to try my hand at web scraping. What tools/libraries do I need to use. I’m hoping to turn this into something professional so don’...
#web-scraping
123 19127 45
New
stefanchrobot
Questions & Help>Questions

How to decode a JSON into a struct safely?
What’s the safe way to decode a JSON string into a struct? I want to avoid calling String.to_atom. Jason.decode can give me a map with st...
#structs#json
29 20780 26
New
vac
Questions & Help>Questions

Formatting a string to PEM with headers and line breaks
Hi, I'm quite new in Elixir and I'm trying to format a string to a PEM format. I have the certificate value like MIIDBTCCAe2...... and ...
2 14555 7
New
freewebwithme
Questions & Help>Questions

Failed to run 'elixir' command error in vs code
Using vs code and installed ElixirLS: support and debugger. And I got an error popped up on start up says Failed to run ‘elixir’ comma...
#vscode#elixir-ls
48 15871 39
New
ashish173
Questions & Help>Questions

Difference in between :utc_datetime and :naive_datetime in Ecto
I am using Ecto timestamps with postgres, I can see the timestamps() use the :naive_dateime but for my use case I wanted to store the ti...
#ecto#timestamps
79 27907 15
New
shahryarjb
Questions & Help>Questions

How to convert map to string (separated with ,)
Hello, I have map which I want to convert it to string like this: the map: %{last_name: "tavakkoli", name: "shahryar"} the string I ne...
#maps#strings
15 15491 2
New
vonH
Questions & Help>Questions

How do I kill a process ` #PID<0.186.0` in iex?
When I run the Plug and I recompile I wind up having to use Ctrl C to quit iex and start again. Witht the help of rlwrap I can use the cu...
#iex#processes#how-to-question
36 21149 8
New
9mm
Questions & Help>Questions

Elixir way to conditionally update a map
I am constructing a JSON object (map) and I need to conditionally set a field. I’m trying to write proper elixir-way code… and I’m at a l...
#maps
55 19905 29
New
Back to top

Latest Phoenix Threads

Phoenix Forum ❯

News>Phoenix News

News Phoenix News ❯

Latest on Elixir Forum

Elixir Forum ❯

Sponsor Spotlight

Potions

The deployment platform built for Elixir: PaaS ease, VPS control.

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

WyewWorks

Enabling companies to succeed by building software people love.

Potions

The deployment platform built for Elixir: PaaS ease, VPS control.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Forums

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

WyewWorks

Enabling companies to succeed by building software people love.

Potions

The deployment platform built for Elixir: PaaS ease, VPS control.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement