Archives - 03 January 2013, Thursday - OpenRuby.com

Follow @openruby

Archives - 03 January 2013, Thursday

Ruby on Railsのfind_by_*メソッドにSQLインジェクション脆弱性(CVE-2012-5664) | 徳丸浩の日記

blog.tokumaru.org 03 Jan '13, 1pm

The simple problem is, that most developers are simply not aware of the confidentiality of this file , and in result they 'll happly(happilyのtypoか?) check it into Github or other online repositories
Related:
1. 徳丸浩の日記: Ruby on Railsのfind_by_*メソッドにSQLインジェクション脆弱性(CVE-2012-5664) blog.tokumaru.org 03 Jan '13, 3pm
2. Ruby on Rails SQL injection issue [LWN.net] lwn.net 03 Jan '13, 1am
3. Por qué aprender Ruby on Rails cristalab.com 03 Jan '13, 8pm
4. Ruby on Rails Developer @WeedMaps Job, WeedMaps - Ruby Jobs jobs.rubyinside.com 02 Jan '13, 7am
5. Senior Ruby on Rails developer | CSS | HTML | Javascript | Linux | Ruby & R... freelancer.com 02 Jan '13, 1pm
6. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
7. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
8. Desarrollador Ruby on Rails trabajosrails.com 02 Jan '13, 6am
Ruby on Rails has SQL injection vuln

theregister.co.uk 03 Jan '13, 10pm

The maintainers of Ruby on Rails are warning of an SQL injection vulnerability which affects all versions of the popular Web framework. They advise that users should immediately apply an upgrade available here . Designated CVE-2012-5664, the maintainers explain the bug this way: “Due ...
Related:
1. Ruby on Rails SQL injection issue [LWN.net] lwn.net 03 Jan '13, 1am
2. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
3. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
4. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
5. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
6. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
7. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
8. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
Lücke in Ruby on Rails erlaubt SQL-Injections | heise Security

heise.de 03 Jan '13, 1pm

Die Entwickler des freien Frameworks Ruby on Rails warnen vor einer Lücke in den Versionen 3.0, 3.1 und 3.2, durch die ein Angreifer beliebigen SQL-Code ausführen kann. Der Fehler befindet sich im Modul ActiveRecord und wurde inzwischen durch die RoR-Versionen 3.0.18, 3.1.9 und 3.2.10...
Related:
1. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
2. Ruby on Rails security updates address SQL injection flaw | Security - Info... infoworld.com 03 Jan '13, 2pm
3. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
4. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
5. SQL injection vulnerability hits all Ruby on Rails versions - The H Securit... h-online.com 03 Jan '13, 9am
6. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
7. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
8. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost

threatpost.com 03 Jan '13, 3pm

All of the current versions of the Ruby on Rails Web framework have a SQL injection vulnerability that could allow an attacker to inject code into Web applications. The vulnerability is a serious one given the widespread use of the popular framework for developing Web apps, and the ma...
Related:
1. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
2. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
3. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
4. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
5. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
6. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
7. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
8. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot

it.slashdot.org 03 Jan '13, 4pm

"All of the current versions of the Ruby on Rails Web framework have a SQL injection vulnerability that could allow an attacker to inject code into Web applications . The vulnerability is a serious one given the widespread use of the popular framework for developing Web apps, and the ...
Related:
1. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
2. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
3. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
4. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
5. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
6. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
7. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
8. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
SQL injection vulnerability hits all Ruby on Rails versions - The H Open: News and Features

h-online.com 03 Jan '13, 9am

The Ruby on Rails developers are warning of an SQL injection vulnerability that affects all current versions of the web framework. New releases of Ruby on Rails – 3.2.10, 3.1.9 and 3.0.18 – are now available . It is recommended that all users update immediately. For users unable to up...
Related:
1. SQL injection vulnerability hits all Ruby on Rails versions - The H Securit... h-online.com 03 Jan '13, 9am
2. SQL Injection Vulnerability in Ruby on Rails; affects all versions news.ycombinator.com 02 Jan '13, 9pm
3. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
4. SQL Injection Vulnerability in Ruby on Rails; affects all versions: news.ycombinator.com 02 Jan '13, 11pm
5. SQL Injection Vulnerability in several versions of Rails! rubyflow.com 02 Jan '13, 11pm
6. SQL Injection Vulnerability in Ruby on Rails; affects all versions: Comments groups.google.com 02 Jan '13, 10pm
7. Oh shit : SQL Injection Vulnerability in Ruby on Rails; affects all versions groups.google.com 02 Jan '13, 10pm
8. SQL Injection Vulnerability in Ruby on Rails; affects all versions groups.google.com 02 Jan '13, 9pm
All Ruby on Rails versions affected by SQL injection flaw

net-security.org 03 Jan '13, 3pm

Three new versions of popular open source web application framework Ruby on Rails have been released on Wednesday in order to fix an SQL injection vulnerability that affected all the previous versions of Rails. "Due to the way dynamic finders in Active Record extract options from meth...
Related:
1. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
2. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
3. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
4. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
5. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
6. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
7. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
8. SQL injection vulnerability hits all Ruby on Rails versions - The H Open: N... h-online.com 03 Jan '13, 9am
Por qué aprender Ruby on Rails

cristalab.com 03 Jan '13, 8pm

Una de las cosas que me dejó el 2012 fué conocer Ruby on Rails. Luego de haber navegado un poco por PHP, haber conocido CodeIgniter y luego probado Django con la guía de Maestros del Web, puedo llegar a la conclusión de que si tuviera que programar en un solo lenguaje para la web, lo ...
Related:
1. Desarrollador Ruby on Rails trabajosrails.com 02 Jan '13, 6am
2. Rails, Ruby, And Type-Checking gilesbowkett.blogspot.com 02 Jan '13, 10am
3. Unsafe Query Generation Risk in Ruby on Rails (CVE-2013-0155) groups.google.com 08 Jan '13, 8pm
4. Developer(PostgreSQL,MySQL,Agile)-Finance Job in London, London jobview.monster.co.uk 06 Jan '13, 8pm
5. Ruby on Railsのfind_by_*メソッドにSQLインジェクション脆弱性(CVE-2012-5664) | 徳丸浩の日記 blog.tokumaru.org 03 Jan '13, 1pm
6. Web de Empleos y Vacantes en Republica Dominicana | Picoteo.com.do picoteo.com.do 04 Jan '13, 5pm
7. jbvkoos instagram.com 07 Jan '13, 10am
8. Senior Software Engineer - Oracle Social Platform findmjob.com 06 Jan '13, 4pm
Ruby on Rails security updates address SQL injection flaw | Security - InfoWorld

infoworld.com 03 Jan '13, 2pm

The developers of Ruby on Rails, a popular Web application development framework for the Ruby programming language, released versions 3.2.10, 3.1.9, and 3.0.18 of the software on Wednesday in order to patch a serious SQL injection vulnerability. "These releases contain an important se...
Related:
1. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
2. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
3. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
4. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
5. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
6. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
7. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
8. Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability news.softpedia.com 03 Jan '13, 12pm
SQL injection vulnerability hits all Ruby on Rails versions - The H Security: News and Features

h-online.com 03 Jan '13, 9am

The Ruby on Rails developers are warning of an SQL injection vulnerability that affects all current versions of the web framework. New releases of Ruby on Rails – 3.2.10, 3.1.9 and 3.0.18 – are now available . It is recommended that all users update immediately. For users unable to up...
Related:
1. SQL injection vulnerability hits all Ruby on Rails versions - The H Open: N... h-online.com 03 Jan '13, 9am
2. SQL Injection Vulnerability in Ruby on Rails; affects all versions news.ycombinator.com 02 Jan '13, 9pm
3. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
4. SQL Injection Vulnerability in several versions of Rails! rubyflow.com 02 Jan '13, 11pm
5. SQL Injection Vulnerability in Ruby on Rails; affects all versions: news.ycombinator.com 02 Jan '13, 11pm
6. SQL Injection Vulnerability in Ruby on Rails; affects all versions: Comments groups.google.com 02 Jan '13, 10pm
7. Oh shit : SQL Injection Vulnerability in Ruby on Rails; affects all versions groups.google.com 02 Jan '13, 10pm
8. SQL Injection Vulnerability in Ruby on Rails; affects all versions groups.google.com 02 Jan '13, 9pm
Ruby on Rails security updates address SQL injection flaw

networkworld.com 03 Jan '13, 7pm

IDG News Service - The developers of Ruby on Rails, a popular Web application development framework for the Ruby programming language, released versions 3.2.10, 3.1.9, and 3.0.18 of the software on Wednesday in order to patch a serious SQL injection vulnerability. 15 amazing Web apps ...
Related:
1. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
2. Ruby on Rails security updates address SQL injection flaw | Security - Info... infoworld.com 03 Jan '13, 2pm
3. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
4. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
5. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
6. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
7. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
8. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
Ruby on Rails security updates address SQL injection flaw - Techworld.com

news.techworld.com 03 Jan '13, 3pm

Ruby on Rails developers have released versions 3.2.10, 3.1.9, and 3.0.18 of the popular web application development framework for the Ruby programming language in order to patch a serious SQL injection vulnerability. "These releases contain an important security fix," the Rails devel...
Related:
1. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
2. Ruby on Rails security updates address SQL injection flaw | Security - Info... infoworld.com 03 Jan '13, 2pm
3. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
4. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
5. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
6. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
7. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
8. Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability news.softpedia.com 03 Jan '13, 12pm
Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability

news.softpedia.com 03 Jan '13, 12pm

Ruby on Rails 3.2.10, 3.1.9, and 3.0.18 have been released to address an SQL Injection vulnerability in Active Record that affects all versions. According to the developers, the release comes so close to the holidays because the details of the exploit have already been publicly disclo...
Related:
1. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
2. [ANN] Rails 3.2.10, 3.1.9, and 3.0.18 have been released! weblog.rubyonrails.org 03 Jan '13, 2am
3. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
4. SQL Injection Vulnerability in Ruby on Rails; affects 3.x groups.google.com 02 Jan '13, 9pm
5. SQL Injection Vulnerability in Ruby on Rails; affects all versions news.ycombinator.com 02 Jan '13, 9pm
6. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
7. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
8. SQL injection vulnerability hits all Ruby on Rails versions - The H Open: N... h-online.com 03 Jan '13, 9am
SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost

threatpost.com 03 Jan '13, 3pm

All of the current versions of the Ruby on Rails Web framework have a SQL injection vulnerability that could allow an attacker to inject code into Web applications. The vulnerability is a serious one given the widespread use of the popular framework for developing Web apps, and the ma...
Related:
1. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
2. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
3. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
4. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
5. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
6. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
7. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
8. Ruby on Rails security updates address SQL injection flaw | Security - Info... infoworld.com 03 Jan '13, 2pm
Ruby on Rails updates address SQL injection flaw - Computerworld

computerworld.com 03 Jan '13, 3pm

IDG News Service - The developers of Ruby on Rails, a popular open source Web application development framework for the Ruby programming language, released versions 3.2.10, 3.1.9, and 3.0.18 of the software on Wednesday in order to patch a serious SQL injection vulnerability. "These r...
Related:
1. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
2. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
3. Ruby on Rails security updates address SQL injection flaw | Security - Info... infoworld.com 03 Jan '13, 2pm
4. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
5. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
6. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
7. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
8. Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability news.softpedia.com 03 Jan '13, 12pm
Rails SQL injection vulnerability: hold your horses, here are the facts

rubyflow.com 03 Jan '13, 11am

Rails SQL injection vulnerability: hold your horses, here are the facts Posted by FooBarWidget on January 03, 2013 — 0 comments This blog post explains the recent vulnerability, how it works and what the facts and non-facts are. Comments Post a Comment Comment abilities for non re...
Related:
1. Rails SQL injection vulnerability: hold your horses, here are the facts – P... blog.phusion.nl 04 Jan '13, 1pm
2. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
3. SQL Injection Vulnerability in Ruby on Rails; affects 3.x groups.google.com 02 Jan '13, 9pm
4. SQL Injection Vulnerability in several versions of Rails! rubyflow.com 02 Jan '13, 11pm
5. SQL injection vulnerability hits all Ruby on Rails versions - The H Open: N... h-online.com 03 Jan '13, 9am
6. SQL injection vulnerability hits all Ruby on Rails versions - The H Securit... h-online.com 03 Jan '13, 9am
7. SQL Injection Vulnerability in Ruby on Rails; affects all versions news.ycombinator.com 02 Jan '13, 9pm
8. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
Injection SQL sur toutes les versions de Ruby on Rails - LinuxFr.org

linuxfr.org 03 Jan '13, 5pm

(aka RoR, un framwork de développement web open source populaire et basé sur Ruby) viennent d'émettre une alerte concernant une faille de sécurité de type injection SQL impactant toutes les versions de Ruby on Rails. Selon l'annonce, la faille se situe dans l'interface de requêtage d'...
Related:
1. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
2. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
3. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
4. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
5. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
6. SQL injection vulnerability hits all Ruby on Rails versions - The H Open: N... h-online.com 03 Jan '13, 9am
7. SQL injection vulnerability hits all Ruby on Rails versions - The H Securit... h-online.com 03 Jan '13, 9am
8. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot

it.slashdot.org 03 Jan '13, 4pm

"All of the current versions of the Ruby on Rails Web framework have a SQL injection vulnerability that could allow an attacker to inject code into Web applications . The vulnerability is a serious one given the widespread use of the popular framework for developing Web apps, and the ...
Related:
1. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm
2. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
3. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
4. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
5. Ruby on Rails security updates address SQL injection flaw - Techworld.com news.techworld.com 03 Jan '13, 3pm
6. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
7. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
8. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
How to Migrate Your Heroku Ruby Application to OpenShift | OpenShift by Red Hat

openshift.redhat.com 03 Jan '13, 5pm

In this blog post I'll share my experience migrating an existing application built for Heroku to OpenShift. Hopefully this blog post will give ideas on how to migrate your own application while showing how easy it can be. Every application is different so the steps you may need to per...
Rails 4: What's New

rubyflow.com 03 Jan '13, 9pm

Rails 4: What's New Posted by jangosteve on January 03, 2013 — 0 comments Basically transcribed the highlights from Andy Lindeman's "Rails 4 Whirlwind Tour" talk (with his permission and proofreading :-) including some of my own commentary. See article: Rails 4: What's New Comments ...
Related:
1. #400 What's New in Rails 4 railscasts.com 04 Jan '13, 10am
2. #400 What's New in Rails 4 railscasts.com 04 Jan '13, 7pm
3. 4 news.humancoders.com 08 Jan '13, 1pm
4. #400 What's New in Rails 4 railscasts.com 06 Jan '13, 9pm
5. A Rails 4 love affair with PostgreSQL rubyflow.com 29 Dec '12, 9pm
6. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
7. Préparez votre application web pour Rails 4 | news.humancoders.com 02 Jan '13, 2pm
8. Ruby on Rails Developer @WeedMaps Job, WeedMaps - Ruby Jobs jobs.rubyinside.com 02 Jan '13, 7am
徳丸浩の日記: Ruby on Railsのfind_by_*メソッドにSQLインジェクション脆弱性(CVE-2012-5664)

blog.tokumaru.org 03 Jan '13, 3pm

The simple problem is, that most developers are simply not aware of the confidentiality of this file , and in result they 'll happly(happilyのtypoか?) check it into Github or other online repositories
Related:
1. Ruby on Railsのfind_by_*メソッドにSQLインジェクション脆弱性(CVE-2012-5664) | 徳丸浩の日記 blog.tokumaru.org 03 Jan '13, 1pm
2. Ruby on Rails Developer @WeedMaps Job, WeedMaps - Ruby Jobs jobs.rubyinside.com 02 Jan '13, 7am
3. Senior Ruby on Rails developer | CSS | HTML | Javascript | Linux | Ruby & R... freelancer.com 02 Jan '13, 1pm
4. YEGRB - Edmonton's Ruby Meetup yegrb.com 01 Jan '13, 5pm
5. Custom Content Management System Needed - Php Ruby On Rails Ruby job simplyhired.com 01 Jan '13, 11am
Ruby on Rails SQL injection issue [LWN.net]

lwn.net 03 Jan '13, 1am

Ruby on Rails SQL injection issue [Posted January 3, 2013 by corbet] Ruby on Rails SQL injection issue [Security] Posted Jan 3, 2013 1:06 UTC (Thu) by corbet An SQL injection vulnerability in all Ruby on Rails releases has been disclosed. "Due to the way dynamic finders in Active Reco...
Related:
1. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
2. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
3. SQL Injection Vulnerability in Ruby on Rails; affects all versions news.ycombinator.com 02 Jan '13, 9pm
4. SQL Injection Vulnerability in Ruby on Rails; affects 3.x groups.google.com 02 Jan '13, 9pm
5. SQL injection vulnerability hits all Ruby on Rails versions - The H Securit... h-online.com 03 Jan '13, 9am
6. Ruby on Rails security updates address SQL injection flaw networkworld.com 03 Jan '13, 7pm
7. SQL Injection Vulnerability in Ruby on Rails; affects all versions: Comments groups.google.com 02 Jan '13, 10pm
8. Ruby on Rails updates address SQL injection flaw - Computerworld computerworld.com 03 Jan '13, 3pm
PentesterLab: On exploiting CVE-2012-5664...

blog.pentesterlab.com 03 Jan '13, 3am

Just a quick write-up on this, I will probably do an exercise on it soon, like I did for the previous bug in ActiveRecord . It's pretty trivial to exploit if you have the right condition... The right condition being: the ability to send symbols to activerecord. When you read the advis...
Related:
1. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
2. Ruby on Rails SQL injection issue [LWN.net] lwn.net 03 Jan '13, 1am
3. Ruby on Rails has SQL injection vuln theregister.co.uk 03 Jan '13, 10pm
4. Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability news.softpedia.com 03 Jan '13, 12pm
5. SQL Injection Vulnerability in several versions of Rails! rubyflow.com 02 Jan '13, 11pm
6. SQL Injection Flaw Haunts All Ruby on Rails Versions | threatpost threatpost.com 03 Jan '13, 3pm
7. SQL injection vulnerability hits all Ruby on Rails versions - The H Open: N... h-online.com 03 Jan '13, 9am
8. SQL injection vulnerability hits all Ruby on Rails versions - The H Securit... h-online.com 03 Jan '13, 9am
[ANN] Rails 3.2.10, 3.1.9, and 3.0.18 have been released!

weblog.rubyonrails.org 03 Jan '13, 2am

Rails versions 3.2.10, 3.1.9, and 3.0.18 have been released. These releases contain an important security fix. It is recommended that all users upgrade immediately . The security identifier is CVE-2012-5664, and you can read about the issue here . For other change in each particular r...
Related:
1. [ANN] Rails 3.2.10, 3.1.9, and 3.0.18 have been released! weblog.rubyonrails.org 02 Jan '13, 9pm
2. Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability news.softpedia.com 03 Jan '13, 12pm
3. SQL Injection Vulnerability in several versions of Rails! rubyflow.com 02 Jan '13, 11pm
4. SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) permalink.gmane.org 02 Jan '13, 9pm
5. SQL injection vulnerability hits all Ruby on Rails versions - The H Open: N... h-online.com 03 Jan '13, 9am
6. SQL injection vulnerability hits all Ruby on Rails versions - The H Securit... h-online.com 03 Jan '13, 9am
7. All Ruby on Rails versions affected by SQL injection flaw net-security.org 03 Jan '13, 3pm
8. All Ruby On Rails Versions Suffer SQL Injection Flaw - Slashdot it.slashdot.org 03 Jan '13, 4pm