Path to this page:
Subject: CVS commit: pkgsrc/textproc/ruby-rexml
From: Takahiro Kambe
Date: 2024-07-20 18:15:03
Message id: 20240720161504.0AF3BFC74@cvs.NetBSD.org
Log Message:
textproc/ruby-rexml: add package version 3.3.2
ruby-rexml package had once removed from pkgsrc since all Ruby language
release contains it as a bundled gem.
But recently, there are two security problem in rexml and there is no
Ruby language release which fixes these problems.
CVE-2024-35176: DoS in REXML
CVE-2024-39908 : DoS in REXML
Instead, new rexml release are provided and installing ruby-rexml package
solves there security problems.
REXML
REXML was inspired by the Electric XML library for Java, which features an
easy-to-use API, small size, and speed. Hopefully, REXML, designed with the
same philosophy, has these same features. I've tried to keep the API as
intuitive as possible, and have followed the Ruby methodology for method
naming and code flow, rather than mirroring the Java API.
REXML supports both tree and stream document parsing. Stream parsing is
faster (about 1.5 times as fast). However, with stream parsing, you don't
get access to features such as XPath.
Files: