USN-7256-1
- Source
- https://ubuntu.com/security/notices/USN-7256-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7256-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-7256-1
- Related
- Published
- 2025-02-06T03:10:39.655048Z
- Modified
- 2025-02-06T03:10:39.655048Z
- Summary
- ruby2.7 vulnerabilities
- Details
-
It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service.
- References
Affected packages
Ubuntu:20.04:LTS / ruby2.7
Package
- Name
- ruby2.7
- Purl
- pkg:deb/ubuntu/ruby2.7@2.7.0-5ubuntu1.16?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.7.0-5ubuntu1.16
Affected versions
2.*
2.7.0-1
2.7.0-2
2.7.0-3
2.7.0-4
2.7.0-4ubuntu1
2.7.0-5ubuntu1
2.7.0-5ubuntu1.1
2.7.0-5ubuntu1.2
2.7.0-5ubuntu1.3
2.7.0-5ubuntu1.4
2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.6
2.7.0-5ubuntu1.7
2.7.0-5ubuntu1.8
2.7.0-5ubuntu1.9
2.7.0-5ubuntu1.10
2.7.0-5ubuntu1.11
2.7.0-5ubuntu1.12
2.7.0-5ubuntu1.13
2.7.0-5ubuntu1.14
2.7.0-5ubuntu1.15
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.7.0-5ubuntu1.16",
"binary_name": "libruby2.7"
},
{
"binary_version": "2.7.0-5ubuntu1.16",
"binary_name": "libruby2.7-dbgsym"
},
{
"binary_version": "2.7.0-5ubuntu1.16",
"binary_name": "ruby2.7"
},
{
"binary_version": "2.7.0-5ubuntu1.16",
"binary_name": "ruby2.7-dbgsym"
},
{
"binary_version": "2.7.0-5ubuntu1.16",
"binary_name": "ruby2.7-dev"
},
{
"binary_version": "2.7.0-5ubuntu1.16",
"binary_name": "ruby2.7-doc"
}
]
}