AVG-1788 log

Package ruby-rexml
Status Fixed
Severity Critical
Type incorrect calculation
Affected 3.2.4-1
Fixed 3.2.5-1
Current 3.2.6-1 [extra]
Ticket None
Created Thu Apr 8 19:23:35 2021
Issue Severity Remote Type Description
CVE-2021-28965 Critical Yes Incorrect calculation
When parsing and serializing a crafted XML document, the REXML gem (including the one bundled with Ruby) can create a wrong XML document whose structure is...