For more info see this post on the jRuby site: http://www.jruby.org/2011/12/27/jruby-1-6-5-1 http://www.jruby.org/2011/12/27/jruby-1-6-5-1 In summary, this is

For more info see this post on the jRuby site: http://www.jruby.org/2011/12/27/jruby-1-6-5-1 http://www.jruby.org/2011/12/27/jruby-1-6-5-1 In summary, this is an attack being announced at 28C3 tomorrow. It affects most major platforms, including Ruby, PHP, Java, and ASP.net and possibly including others. This is the CERT advisory, although its 403ing at the moment. http://www.ocert.org/advisories/ocert-2011-003.html http://www.ocert.org/advisories/ocert-2011-003.html The two security researchers are Julian Wälde (@zeri42) and Alexander Klink(@alech).