News>Phoenix News

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

/phoenix#ecto#security#otp#jason
josevalim

josevalim

Creator of Elixir

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies

We were notified by Panagiotis Nezis that certain payloads could take a long time to process when converted to integers. New Erlang/OTP versions have been released to address this:

  • Patch Package OTP 24.3.4.13 Released
  • Patch Package OTP 25.3.2.3 Released
  • Patch Package OTP 26.0.2 Released

We recommend updating Erlang/OTP to the versions above or later. However, if it is not possible, we have also released patch versions for Jason (thanks @michalmuskala) and Ecto for your convenience. You can update to:

  • Jason v1.4.1+
  • Ecto v3.9.6+ or Ecto v3.10.3+
View thread on forum
/phoenix#ecto#security#otp#jason
28 973 0

Where Next?

View thread on forum
phoenix
ecto
security
otp
jason
Home News>Phoenix News
/phoenix#ecto#security#otp#jason
28 973 0
Last post

Popular in Phoenix News Top

steffend
News>Phoenix News

Phoenix LiveView - 1.2.0 released
LiveView 1.2.0 is out now! Colocated CSS The biggest new feature is support for Colocated CSS, which is built on the work we did in 1.1 ...
/phoenix#liveview
62 1065 4
New
AstonJ
News>Phoenix News

About the Phoenix News category
Phoenix News Section
/phoenix
0 1300 0
New
chrismccord
News>Phoenix News

Phoenix v1.3.0-rc.0 released
As promised, the first release candidate of Phoenix 1.3.0 is out! This release focuses on code generators with improved project structure...
/phoenix#phoenix-release
434 30011 96
New
chrismccord
News>Phoenix News

Phoenix 1.7.0 final is out!
The final release of Phoenix 1.7 is out! Most of the new features have been outlined in the 1.7 RC thread, but it has been a few months s...
/phoenix#phoenix-announcement
327 10363 41
New
chrismccord
News>Phoenix News

Phoenix 1.4.0 released!
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
/phoenix#phoenix-release
688 31013 112
New
chrismccord
News>Phoenix News

Phoenix 1.7.0-rc.0 is out!
You can read the announcement on the blog, but I’ll dup most of it here for discussion purposes: ––––––––––––––––––––––––––––––––––––––...
/phoenix#phoenix-announcement
451 14062 109
New
chrismccord
News>Phoenix News

Phoenix v1.5.0 released!
This release brings a number of exciting features, including integration with the new Phoenix LiveDashboard and Phoenix LiveView. There h...
/phoenix#phoenix-release
379 29252 93
New
chrismccord
News>Phoenix News

Phoenix 1.3, 1.4, 1.5, and 1.6 security releases for wildcard check_origin vulnerability
Phoenix 1.3.5, 1.4.18, 1.5.14, and 1.6.14 have been released to resolve a vulnerability in wildcard check_origin configurations. Previou...
/phoenix#phoenix-security
69 3035 3
New
josevalim
News>Phoenix News

PSA: Upgrade Erlang/OTP or Ecto/Jason dependencies
We were notified by Panagiotis Nezis that certain payloads could take a long time to process when converted to integers. New Erlang/OTP v...
/phoenix#ecto#security#otp#jason
28 972 0
New
chrismccord
News>Phoenix News

Phoenix LiveView 1.0.0-rc.0 is out!
LiveView 1.0.0-rc.0 is out! This 1.0 milestone comes almost six years after the first LiveView commit. I published a Phoenix blog highli...
/phoenix#liveview
353 7492 47
New

Other popular topics Top

danschultzer
News>Announcing

Pow - Robust, modular, extendable user authentication and management system
None of the current solutions worked well for me, so I went ahead and built a user management system from scratch. This project took far...
/phoenix#authentication#library#authorization#user_system#pow
548 29603 241
New
9mm
Questions & Help>Questions

Elixir way to conditionally update a map
I am constructing a JSON object (map) and I need to conditionally set a field. I’m trying to write proper elixir-way code… and I’m at a l...
#maps
55 20289 29
New
Darmani72
Questions & Help>Questions

Params in the URL and body -- how does Phoenix handle them together?
If I have a post route which an argument: post /my_post_route/:my_param1, MyController.my_post_handler How would get the post params ...
/phoenix#params
17 27034 14
New
Nvim
Chat & Discussions>Discussions

Django vs Phoenix
Anybody knows a comprehensive comparison of Django and Phoenix, thanks for the help. Where are they similar? Where do they differ the m...
/phoenix#learning-elixir
184 21830 82
New
stefanchrobot
Questions & Help>Questions

How to decode a JSON into a struct safely?
What’s the safe way to decode a JSON string into a struct? I want to avoid calling String.to_atom. Jason.decode can give me a map with st...
#structs#json
29 21253 26
New
gausby
Chat & Discussions>Discussions

Have you moved away from elixir? If so, why?
I asked this very same question on twitter and got some interesting feedback, but I thought it would be a good question to ask here as we...
#discussion#adoption
1207 39467 209
New
AstonJ
Chat & Discussions>Discussions

Elixir Code Editors & IDEs - which one are you using? (Poll)
Please see the new poll here: Which code editor or IDE do you use? (Poll) (2022 Edition) It’s been a while since we first asked this, I...
#code-editors
208 31265 143
New
ashish173
Questions & Help>Questions

Difference in between :utc_datetime and :naive_datetime in Ecto
I am using Ecto timestamps with postgres, I can see the timestamps() use the :naive_dateime but for my use case I wanted to store the ti...
#ecto#timestamps
79 28261 15
New
PeterCarter
Questions & Help>Questions

Good auth solutions for Elixir/Phoenix?
There are pre-rolled solutions for other frameworks that do work. However, Phoenix does not seem to have these. Have people had good expe...
/phoenix#authentication
48 21591 20
New
vonH
Questions & Help>Questions

Why would I choose Elixir as a general purpose programming language?
In asking this question I am more interested about the expressiveness of the language itself and less concerned about the availability of...
#functional-programming#use-cases
65 35045 13
New
Back to top

Latest Phoenix Threads

Phoenix Forum ❯

News>Phoenix News

News Phoenix News ❯

Latest on Elixir Forum

Elixir Forum ❯

Sponsor Spotlight

Honeybadger

Move fast and fix things! Error tracking with less noise for Elixir devs who love to ship. Start your free dev account.

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Honeybadger

Error tracking for Elixir devs who love to ship. Start your free account.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Manning

Develop your skills with books, videos, and courses.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

Software Mansion

The team behind Membrane, Popcorn, LiveDebugger. Available for hire.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Forums

Popular Tags

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Honeybadger

Error tracking for Elixir devs who love to ship. Start your free account.

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Manning

Develop your skills with books, videos, and courses.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

Software Mansion

The team behind Membrane, Popcorn, LiveDebugger. Available for hire.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement