USN-4922-2: Ruby vulnerability
26 April 2021
Ruby incorrectly handled XML documents.
- ruby2.7 - Object-oriented scripting language
USN-4922-1 fixed a vulnerability in Ruby. This update provides the
corresponding update for Ubuntu 21.04.
Original advisory details:
Juho Nurminen discovered that the REXML gem bundled with Ruby incorrectly
parsed and serialized XML documents. A remote attacker could possibly use
this issue to perform an XML round-trip attack.
- USN-4922-1: ruby2.7, ruby2.5-doc, ruby2.3-dev, ruby2.7-dev, libruby2.5, ruby2.3-tcltk, ruby2.5-dev, ruby2.5, libruby2.7, ruby2.7-doc, ruby2.3-doc, libruby2.3, ruby2.3