From: James Britt <james.britt@...>
Date: 2008-08-24T01:28:41+09:00
Subject: Re: [ANN] DoS vulnerability in REXML

Shugo Maeda wrote:
> Hello,
> 
> DoS vulenerabilitiy has been discovered in REXML.
> You can also read this report at the following URL.
> 
> * <URL:http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/>
> 
> = DoS vulnerability in REXML
> 
> There is a DoS vulnerability in the REXML library used by Rails to
> parse incoming XML requests.  

To be clear: This is a Rails issue, not a general REXML issue?

The post suggests that Rails uses a different REXML library  than what 
ships with the standard Ruby distro, and mentions no other Ruby 
framework (Web or otherwise).


-- 
James Britt

www.happycamperstudios.com   - Wicked Cool Coding
www.jamesbritt.com           - Playing with Better Toys
www.ruby-doc.org             - Ruby Help & Documentation
www.rubystuff.com            - The Ruby Store for Ruby Stuff