REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, >]
and ]>
. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.0.2-7ubuntu2.8", "binary_name": "libruby3.0" }, { "binary_version": "3.0.2-7ubuntu2.8", "binary_name": "libruby3.0-dbgsym" }, { "binary_version": "3.0.2-7ubuntu2.8", "binary_name": "ruby3.0" }, { "binary_version": "3.0.2-7ubuntu2.8", "binary_name": "ruby3.0-dbgsym" }, { "binary_version": "3.0.2-7ubuntu2.8", "binary_name": "ruby3.0-dev" }, { "binary_version": "3.0.2-7ubuntu2.8", "binary_name": "ruby3.0-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.3.4-2ubuntu5", "binary_name": "libruby3.3" }, { "binary_version": "3.3.4-2ubuntu5", "binary_name": "libruby3.3-dbgsym" }, { "binary_version": "3.3.4-2ubuntu5", "binary_name": "ruby3.3" }, { "binary_version": "3.3.4-2ubuntu5", "binary_name": "ruby3.3-dbgsym" }, { "binary_version": "3.3.4-2ubuntu5", "binary_name": "ruby3.3-dev" }, { "binary_version": "3.3.4-2ubuntu5", "binary_name": "ruby3.3-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.2.3-1ubuntu0.24.04.3", "binary_name": "libruby3.2" }, { "binary_version": "3.2.3-1ubuntu0.24.04.3", "binary_name": "libruby3.2-dbgsym" }, { "binary_version": "3.2.3-1ubuntu0.24.04.3", "binary_name": "ruby3.2" }, { "binary_version": "3.2.3-1ubuntu0.24.04.3", "binary_name": "ruby3.2-dbgsym" }, { "binary_version": "3.2.3-1ubuntu0.24.04.3", "binary_name": "ruby3.2-dev" }, { "binary_version": "3.2.3-1ubuntu0.24.04.3", "binary_name": "ruby3.2-doc" } ] }