Users of Ruby on Rails have been told to update their installations immediately, following the discovery of a security flaw in the popular open-source Web application framework.
The Ruby on Rails team members released a patch on Wednesday that they describe as "mandatory" for all public sites built using recent versions of the Web-application framework.
This patch fixes what the team called a "serious security concern," the precise nature of which hasn't been revealed, in all versions of Rails from 1.1 up to 1.1.4.
"The issue is in fact of such a criticality that we're not going to dig into the specifics," the team said in a statement. However, the flaw does appear to be in the Rails framework rather than in the Ruby language itself.
The team has promised to release more details of the problem in Rails, but said it wants to give users a chance to fix their systems before giving out information that could help attackers. Rails was created by David Heinemeier Hansson and reached version 1.0 in December of last year.
The updated version of Rails is available through Ruby's Gems package management system, or by downloading the package manually from the Rails Web site.
Jonathan Bennett of Builder UK reported from London.
Google creates an animated doodle that features a boy, a girl, Google's search engine, and a jump rope. But might there be darker, more analytical, more troubling interpretations to this tale?
The Silicon Valley online payments startup grew by 1,000 percent last year and is hopeful it can repeat that level of growth this year. To do that, it's had to move away from its early friends-and-family roots and embrace small businesses.
Chamtech's spray-on antenna uses a nano material to provide a low-power boost to antenna range. The wireless-in-a-can product may some day bring an end to unsightly cell towers.
EnerG2 opens a plant to make an engineered carbon that will improve performance of energy storage devices and make storage for start-stop hybrid cars less expensive.
Join the conversation