In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj.
Created rubygem-ox tracking bugs for this issue:
Affects: epel-7 [bug 1509283]
Affects: fedora-all [bug 1509284]
This could be probably closed? Fedora has the new version with the fix, EPEL 7 has the patch backported.
Quit check for this issue:
ruby -rox -e 'Ox.parse_obj("<k><s></s></k>")'
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.