News>Phoenix News

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

/phoenix#ecto#security#otp#jason
josevalim

josevalim

Creator of Elixir

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

We were notified by Panagiotis Nezis that certain payloads could take a long time to process when converted to integers. New Erlang/OTP versions have been released to address this:

  • Patch Package OTP 24.3.4.13 Released
  • Patch Package OTP 25.3.2.3 Released
  • Patch Package OTP 26.0.2 Released

We recommend updating Erlang/OTP to the versions above or later. However, if it is not possible, we have also released patch versions for Jason (thanks @michalmuskala) and Ecto for your convenience. You can update to:

  • Jason v1.4.1+
  • Ecto v3.9.6+ or Ecto v3.10.3+
View thread on forum
/phoenix#ecto#security#otp#jason
28 973 0

Where Next?

View thread on forum
phoenix
ecto
security
otp
jason
Home News>Phoenix News
/phoenix#ecto#security#otp#jason
28 973 0
Last post

Popular in Phoenix News Top

steffend
News>Phoenix News

Phoenix LiveView - 1.2.0 released
LiveView 1.2.0 is out now! Colocated CSS The biggest new feature is support for Colocated CSS, which is built on the work we did in 1.1 ...
/phoenix#liveview
62 1065 4
New
AstonJ
News>Phoenix News

About the Phoenix News category
Phoenix News Section
/phoenix
0 1300 0
New
chrismccord
News>Phoenix News

Security Releases for Phoenix
A minor vulnerability has been disclosed for applications redirecting to URLs provided by user input. Only applications passing user inpu...
/phoenix#phoenix-security
15 7495 0
New
chrismccord
News>Phoenix News

Phoenix 1.7.0 final is out!
The final release of Phoenix 1.7 is out! Most of the new features have been outlined in the 1.7 RC thread, but it has been a few months s...
/phoenix#phoenix-announcement
327 10363 41
New
chrismccord
News>Phoenix News

Phoenix 1.4.0 released!
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
/phoenix#phoenix-release
688 31013 112
New
chrismccord
News>Phoenix News

Phoenix 1.8.0-rc.0 released!
Check the announcement blog for details! Blog duped here for convenience: Phoenix 1.8.0-rc released! The first release candidate of P...
/phoenix#phoenix-release
418 13659 167
New
josevalim
News>Phoenix News

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies
We were notified by Panagiotis Nezis that certain payloads could take a long time to process when converted to integers. New Erlang/OTP v...
/phoenix#ecto#security#otp#jason
28 972 0
New
chrismccord
News>Phoenix News

Phoenix 1.3.0 released
Hey folks, Phoenix 1.3.0 is out! The final release please brings tweaks to web directory and alias conventions that were estabished in t...
/phoenix#phoenix-release
181 17527 53
New
chrismccord
News>Phoenix News

Phoenix LiveView 1.0.0-rc.0 is out!
LiveView 1.0.0-rc.0 is out! This 1.0 milestone comes almost six years after the first LiveView commit. I published a Phoenix blog highli...
/phoenix#liveview
353 7492 47
New
chrismccord
News>Phoenix News

Phoenix 1.6.0-rc.0 released!
I’m pleased to announce the first release candidate of Phoenix 1.6.0 has landed on the heels of a fresh LiveView 0.16 release! This relea...
/phoenix#phoenix-announcement
402 14471 89
New

Other popular topics Top

axelson
Chat & Discussions>Wikis

Emacs - Elixir Setup Configuration Wiki
This post is a wiki (feel free to hit the edit button near the bottom right of this post to add your own changes!) This post collects co...
#spacemacs#wiki#emacs#code-editors#language-server-protocol
239 48342 226
New
skosch
Questions & Help>Questions

Put/update deep inside nested maps (and auto-create intermediate keys)
To my knowledge, put_in, Map.update etc. all have the one limitation of not automatically creating intermediate keys when needed (for exa...
#data-structures#maps#immutability
52 20442 11
New
electic
Questions & Help>Questions

DateTime Format to string?
Hi, I am new to Elixir. I am trying to use the DateTime component to insert a date into MySQL however the there seems to be no way to fo...
#datetime
19 24983 16
New
chrismccord
News>Phoenix News

Phoenix 1.4.0 released!
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
/phoenix#phoenix-release
688 31013 112
New
josevalim
Official Elixir News>Proposals

Behaviours, defoverridable and implementations
Hi everyone, One of the features added to Elixir early on to help integration with Erlang code was the idea of overridable function defi...
#official-elixir-proposal
111 23025 35
New
freewebwithme
Questions & Help>Questions

Failed to run 'elixir' command error in vs code
Using vs code and installed ElixirLS: support and debugger. And I got an error popped up on start up says Failed to run ‘elixir’ comma...
#vscode#elixir-ls
49 16657 39
New
aalberti333
Questions & Help>Questions

Enum.map over list of key/value pairs with a map as the value
As the title describes, I’m trying to run Enum.map() over a list of key/value pairs, where the value is a map. My data looks like this: ...
#enummap
7 19946 6
New
ashish173
Questions & Help>Questions

Difference in between :utc_datetime and :naive_datetime in Ecto
I am using Ecto timestamps with postgres, I can see the timestamps() use the :naive_dateime but for my use case I wanted to store the ti...
#ecto#timestamps
79 28261 15
New
JakeBecker
Chat & Discussions>Discussions

ElixirLS - the Elixir Language Server
TL;DR: I’ve just released an implementation of Microsoft’s IDE-independent Language Server Protocol for Elixir. It adds language support ...
#elixir-ls
1144 54120 245
New
vegabook
Questions & Help>Questions

How to serve an img with Phoenix?
I’m brand new to Phoenix and I have stripped one of the demo applications to the bone. I just want to get an svg up on the screen. Here i...
/phoenix
15 18788 5
New
Back to top

Latest Phoenix Threads

Phoenix Forum ❯

News>Phoenix News

News Phoenix News ❯

Latest on Elixir Forum

Elixir Forum ❯

Sponsor Spotlight

Honeybadger

Move fast and fix things! Error tracking with less noise for Elixir devs who love to ship. Start your free dev account.

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Honeybadger

Error tracking for Elixir devs who love to ship. Start your free account.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Manning

Develop your skills with books, videos, and courses.

WyewWorks

Enabling companies to succeed by building software people love.

Software Mansion

The team behind Membrane, Popcorn, LiveDebugger. Available for hire.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Forums

Popular Tags

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Honeybadger

Error tracking for Elixir devs who love to ship. Start your free account.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Manning

Develop your skills with books, videos, and courses.

WyewWorks

Enabling companies to succeed by building software people love.

Software Mansion

The team behind Membrane, Popcorn, LiveDebugger. Available for hire.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement