Ubuntu Security Notice 4922-1 - Juho Nurminen discovered that the REXML gem bundled with Ruby incorrectly parsed and serialized XML documents. A remote attacker could possibly use this issue to perform an XML round-trip attack.
cf2ecedb6dc196e4af175809b78647a6357efa199acf1dec4b27a28339ad47d1