Issue #20698 has been updated by hsbt (Hiroshi SHIBATA). Backport changed from 3.1: REQUIRED, 3.2: DONE, 3.3: DONE to 3.1: DONE, 3.2: DONE, 3.3: DONE REXML-3.3.9 has been merged at https://github.com/ruby/ruby/commit/3713db9a24c4f4b69c59a0b28c41f861b5a14c97 on `ruby_3_1`. ---------------------------------------- Bug #20698: Please backport fix for CVE-2024-43398 https://bugs.ruby-lang.org/issues/20698#change-112284 * Author: vo.x (Vit Ondruch) * Status: Closed * ruby -v: ruby 3.3.4 (2024-07-09 revision be1089c8ec) [x86_64-linux] * Backport: 3.1: DONE, 3.2: DONE, 3.3: DONE ---------------------------------------- This is similar request to #20667, but since that was already partially done, I have decided to open new ticket -- https://bugs.ruby-lang.org/