Exploring a critical Net::Protocol issue in Ruby 2.6.0p0 and how it can lead to a security problem

TL;DR This bug has been fixed in 2.6.1. Please upgrade and all should be good. If you do any HTTP communication (HTTP requests, Elasticsearch, etc) do not upgrade to 2.6.0p0 or apply the patch below as soon as possible. Ruby is eating up characters when pushed over HTTP Ruby 2.6.0 has been released not long …

Exploring a critical Net::Protocol issue in Ruby 2.6.0p0 and how it can lead to a security problem Read More »