[ol8_appstream] rubygem-rexml-3.2.5-142.module+el8.9.0+90182+7bdfc9e5.noarch

REXML was inspired by the Electric XML library for Java, which features an
easy-to-use API, small size, and speed. Hopefully, REXML, designed with the same
philosophy, has these same features. I've tried to keep the API as intuitive as
possible, and have followed the Ruby methodology for method naming and code
flow, rather than mirroring the Java API.

REXML supports both tree and stream document parsing. Stream parsing is faster
(about 1.5 times as fast). However, with stream parsing, you don't get access to
features such as XPath.

Changelog (Show File list) (Show related packages)

• Fri Mar 01 2024 Jarek Prokop <jprokop@redhat.com> - 3.1.4-142

  - Upgrade to Ruby 3.1.4.
    Resolves: RHEL-28565
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-28564
  - Fix ReDos vulnerability in URI.
    Resolves: RHEL-28567
    Resolves: RHEL-28576
  - Fix ReDos vulnerability in Time.
    Resolves: RHEL-28566
  - Make RDoc soft dependency in IRB.
    Resolves: RHEL-28569

• Thu Apr 21 2022 Jarek Prokop <jprokop@redhat.com> - 3.1.2-141

  - Upgrade to Ruby 3.1.2.
    Resolves: rhbz#2063772

• Tue Oct 05 2021 Jarek Prokop <jprokop@redhat.com> - 3.0.2-140

  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949

• Tue Jul 13 2021 Jarek Prokop <jprokop@redhat.com> - 3.0.2-139

  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.

• Mon Jun 07 2021 Jarek Prokop <jprokop@redhat.com> - 3.0.1-138

  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.

• Wed Apr 07 2021 Pavel Valena <pvalena@redhat.com> - 2.7.3-136

  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227

• Tue Oct 13 2020 Vít Ondruch <vondruch@redhat.com> - 2.7.2-135

  - Upgrade to Ruby 2.7.2.
  - Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.

• Fri Jun 26 2020 Vít Ondruch <vondruch@redhat.com> - 2.7.1-133

  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.

• Fri Jun 26 2020 Jun Aruga <jaruga@redhat.com> - 2.7.1-133

  - Ship racc binary.
    Resolves: rhbz#1851388

• Fri May 29 2020 Jun Aruga <jaruga@redhat.com> - 2.7.1-132

  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135