Security

Not again

Posted on January 16, 2015

Ran steam. It deleted everything on system owned by user.

https://github.com/ValveSoftware/steam-for-linux/issues/3671

sh security forest fires

goto fail

Posted on February 22, 2014

http://www.theregister.co.uk/2014/02/21/apple_patches_ios_ssl_vulnerability/

security

Data injection vulnerability in ActiveRecord

Posted on February 18, 2014

There is a data injection vulnerability in Active Record. Specially crafted strings can be used to save data in PostgreSQL array columns that may not be intended.

Aaron Patterson

security rb

openssh

Posted on November 8, 2013

http://www.openssh.com/txt/gcmrekey.adv

security

Gem exploit: devise

Posted on January 28, 2013

Upgrade immediately unless you are using PostgreSQL or SQLite3. Users of all other databases require immediate upgrade.

José Valim

rb security

Java exploit: 7u10

Posted on January 14, 2013

According to both crimeware authors, the vulnerability exists in all versions of Java 7, including the latest — Java 7 Update 10.

Brian Krebs (details – download)

java security