REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many <
s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.
{ "binaries": [ { "binary_name": "libruby2.7", "binary_version": "2.7.0-5ubuntu1.16" }, { "binary_name": "libruby2.7-dbgsym", "binary_version": "2.7.0-5ubuntu1.16" }, { "binary_name": "ruby2.7", "binary_version": "2.7.0-5ubuntu1.16" }, { "binary_name": "ruby2.7-dbgsym", "binary_version": "2.7.0-5ubuntu1.16" }, { "binary_name": "ruby2.7-dev", "binary_version": "2.7.0-5ubuntu1.16" }, { "binary_name": "ruby2.7-doc", "binary_version": "2.7.0-5ubuntu1.16" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libruby3.0", "binary_version": "3.0.2-7ubuntu2.10" }, { "binary_name": "libruby3.0-dbgsym", "binary_version": "3.0.2-7ubuntu2.10" }, { "binary_name": "ruby3.0", "binary_version": "3.0.2-7ubuntu2.10" }, { "binary_name": "ruby3.0-dbgsym", "binary_version": "3.0.2-7ubuntu2.10" }, { "binary_name": "ruby3.0-dev", "binary_version": "3.0.2-7ubuntu2.10" }, { "binary_name": "ruby3.0-doc", "binary_version": "3.0.2-7ubuntu2.10" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libruby3.3", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "libruby3.3-dbgsym", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3-dbgsym", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3-dev", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3-doc", "binary_version": "3.3.4-2ubuntu5" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libruby3.2", "binary_version": "3.2.3-1ubuntu0.24.04.5" }, { "binary_name": "libruby3.2-dbgsym", "binary_version": "3.2.3-1ubuntu0.24.04.5" }, { "binary_name": "ruby3.2", "binary_version": "3.2.3-1ubuntu0.24.04.5" }, { "binary_name": "ruby3.2-dbgsym", "binary_version": "3.2.3-1ubuntu0.24.04.5" }, { "binary_name": "ruby3.2-dev", "binary_version": "3.2.3-1ubuntu0.24.04.5" }, { "binary_name": "ruby3.2-doc", "binary_version": "3.2.3-1ubuntu0.24.04.5" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libruby3.3", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "libruby3.3-dbgsym", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3-dbgsym", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3-dev", "binary_version": "3.3.4-2ubuntu5" }, { "binary_name": "ruby3.3-doc", "binary_version": "3.3.4-2ubuntu5" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }