Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "libruby2.3-dbgsym": "2.3.1-2~ubuntu16.04.16+esm2", "ruby2.3-tcltk": "2.3.1-2~ubuntu16.04.16+esm2", "ruby2.3-dev-dbgsym": "2.3.1-2~ubuntu16.04.16+esm2", "libruby2.3-dbg": "2.3.1-2~ubuntu16.04.16+esm2", "ruby2.3-dev": "2.3.1-2~ubuntu16.04.16+esm2", "ruby2.3-dbgsym": "2.3.1-2~ubuntu16.04.16+esm2", "libruby2.3": "2.3.1-2~ubuntu16.04.16+esm2", "ruby2.3-tcltk-dbgsym": "2.3.1-2~ubuntu16.04.16+esm2", "ruby2.3": "2.3.1-2~ubuntu16.04.16+esm2", "ruby2.3-doc": "2.3.1-2~ubuntu16.04.16+esm2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "ruby2.5": "2.5.1-1ubuntu1.11", "ruby2.5-dbgsym": "2.5.1-1ubuntu1.11", "libruby2.5": "2.5.1-1ubuntu1.11", "libruby2.5-dbgsym": "2.5.1-1ubuntu1.11", "ruby2.5-dev": "2.5.1-1ubuntu1.11", "ruby2.5-doc": "2.5.1-1ubuntu1.11" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "ruby2.7-doc": "2.7.0-5ubuntu1.6", "ruby2.7-dbgsym": "2.7.0-5ubuntu1.6", "ruby2.7": "2.7.0-5ubuntu1.6", "libruby2.7": "2.7.0-5ubuntu1.6", "libruby2.7-dbgsym": "2.7.0-5ubuntu1.6", "ruby2.7-dev": "2.7.0-5ubuntu1.6" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "ruby3.0-dev": "3.0.2-7ubuntu2", "ruby3.0": "3.0.2-7ubuntu2", "ruby3.0-doc": "3.0.2-7ubuntu2", "libruby3.0": "3.0.2-7ubuntu2", "libruby3.0-dbgsym": "3.0.2-7ubuntu2", "ruby3.0-dbgsym": "3.0.2-7ubuntu2" } ] }