summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNAITOH Jun <naitoh@gmail.com>2025-10-13 19:29:47 +0900
committerHiroshi SHIBATA <hsbt@ruby-lang.org>2025-10-17 10:32:30 +0900
commitd2edfe55e0cebf769c8a343788f56ea406b36286 (patch)
tree6e8941d46ce268d873b007d3e337930d0554b1ce
parentc38243e2c4e874d67b63431f9489f47ddfecdefd (diff)
Bump rexml to v3.4.4 for Ruby 3.2 (CVE-2025-58767)
This update addresses CVE-2025-58767 (GHSA-c2f4-jgmc-q2r5).
-rw-r--r--gems/bundled_gems2
1 files changed, 1 insertions, 1 deletions
diff --git a/gems/bundled_gems b/gems/bundled_gems
index d37d869d41..1219f70c5f 100644
--- a/gems/bundled_gems
+++ b/gems/bundled_gems
@@ -3,7 +3,7 @@ minitest 5.25.1 https://github.com/seattlerb/minitest
power_assert 2.0.3 https://github.com/ruby/power_assert
rake 13.0.6 https://github.com/ruby/rake
test-unit 3.5.7 https://github.com/test-unit/test-unit
-rexml 3.3.9 https://github.com/ruby/rexml
+rexml 3.4.4 https://github.com/ruby/rexml
rss 0.3.1 https://github.com/ruby/rss
net-ftp 0.2.1 https://github.com/ruby/net-ftp
net-imap 0.3.9 https://github.com/ruby/net-imap