| Package | ruby2.5 |
|---|---|
| Version | 2.5.5-3+deb10u9 (buster) |
A regression was found in the REXML gem shipped with ruby2.5.
Some valid XML file were wrongly considered invalid for some namespace corner case (particularly XML file using the xml: namespace).
For Debian 10 buster, these problems have been fixed in version 2.5.5-3+deb10u9.
We recommend that you upgrade your ruby2.5 packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.