Skip to content
OpenAdvisories
Unscored DLA-603-1 1 CVE

ruby-activesupport-3.2 - security update

Published Aug 27, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 ruby-activesupport-3.2 3.2.6-6+deb7u2

Vulnerabilities 1

  • Medium —
    CVE-2015-3227

    activesupport vulnerable to Denial of Service via large XML document depth

    The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.

    rails activesupport Debian RubyGems