Skip to content

Fixed an inaccurate < character in REXML security announces #3624

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Sep 18, 2025
Merged

Fixed an inaccurate < character in REXML security announces #3624

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion en/news/_posts/2024-05-16-dos-rexml-cve-2024-35176.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ There is a DoS vulnerability in REXML gem. This vulnerability has been assigned

## Details

When parsing an XML document that has many `<` in an attribute value, REXML gem may take long time.
When parsing an XML document that has many `>` in an attribute value, REXML gem may take long time.

Please update REXML gem to version 3.2.7 or later.

Expand Down
2 changes: 1 addition & 1 deletion es/news/_posts/2024-05-16-dos-rexml-cve-2024-35176.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ Recomendamos enfáticamente actualizar la gema REXML.

## Detalles

Cuando se analiza un documento XML con muchos `<` en el valor
Cuando se analiza un documento XML con muchos `>` en el valor
de un atributo, la gema REXML puede tardar largo tiempo.

Por favor actualice la gema REXML a la versión 3.2.7 o posterior.
Expand Down
2 changes: 1 addition & 1 deletion ja/news/_posts/2024-05-16-dos-rexml-cve-2024-35176.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ REXML gem内のDoS脆弱性が発見されました。この脆弱性は、[CVE-

## 詳細

REXML gem は、属性値に`<` が多く含まれているXMLドキュメントの解析に時間がかかることがあります。
REXML gem は、属性値に`>` が多く含まれているXMLドキュメントの解析に時間がかかることがあります。
REXML gem を 3.2.7 以上にアップデートしてください。

## 影響を受けるバージョン
Expand Down
2 changes: 1 addition & 1 deletion ko/news/_posts/2024-05-16-dos-rexml-cve-2024-35176.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ REXML gem에서 DoS 취약점이 발견되었습니다. 이 취약점은 CVE 번

## 세부 내용

대량의 `<`를 속성값으로 가지고 있는 XML을 파싱할 때, REXML gem은 처리에 긴 시간이 걸립니다.
대량의 `>`를 속성값으로 가지고 있는 XML을 파싱할 때, REXML gem은 처리에 긴 시간이 걸립니다.

REXML gem을 3.2.7이나 그 이상으로 업데이트하세요.

Expand Down
2 changes: 1 addition & 1 deletion zh_cn/news/_posts/2024-05-16-dos-rexml-cve-2024-35176.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ REXML gem 中存在一个 DoS 漏洞。此漏洞的 CVE 编号为 [CVE-2024-3517

## 详情

当 XML 文档中的一个属性值包含很多 `<` 时，REXML gem 在解析时可能会花费很长时间。
当 XML 文档中的一个属性值包含很多 `>` 时，REXML gem 在解析时可能会花费很长时间。

请更新 REXML gem 至 3.2.7 或后续版本。

Expand Down
2 changes: 1 addition & 1 deletion zh_tw/news/_posts/2024-05-16-dos-rexml-cve-2024-35176.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ lang: zh_tw

## 風險細節

當解析 attribute value 中包含許多 `<` 的 XML 文件時，REXML gem 可能會需要很長的處理時間。
當解析 attribute value 中包含許多 `>` 的 XML 文件時，REXML gem 可能會需要很長的處理時間。

請更新 REXML gem 至 3.2.7 或更新的版本。

Expand Down
Loading