[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade rubygem-rexml to 3.3.9 fix CVE-2024-49761 - branch 3.0-dev (#13908)

Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>

Author: CBL-Mariner-Bot

SPECS/rubygem-rexml/rubygem-rexml.signatures.json

@@ -1,5 +1,5 @@
 {
- "Signatures": {
-  "rexml-3.3.4.tar.gz": "c6ab9da9502b2a5e824925de5f5774d9222c377d0537393f560fba71e0f868c7"
- }
+  "Signatures": {
+    "rexml-3.3.9.tar.gz": "c382728a4b88e7edf2f6d76ea43f837ecac1e89a76d65b15ba18498b263d3ace"
+  }
 }

SPECS/rubygem-rexml/rubygem-rexml.spec

@@ -2,7 +2,7 @@
 %global gem_name rexml
 Summary:        REXML is an XML toolkit for Ruby
 Name:           rubygem-%{gem_name}
-Version:        3.3.4
+Version:        3.3.9
 Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
@@ -34,6 +34,9 @@ gem install -V --local --force --install-dir %{buildroot}/%{gemdir} %{gem_name}-
 %{gemdir}
 
 %changelog
+* Wed May 21 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 3.3.9-1
+- Auto-upgrade to 3.3.9 - fix CVE-2024-49761
+
 * Fri Aug 9 2024 Bhagyashri Pathak <bhapathak@microsoft.com> - 3.3.4-1
 - Upgrade to 3.3.4 to resolve CVE-2024-39908
 

cgmanifest.json

@@ -27154,8 +27154,8 @@
         "type": "other",
         "other": {
           "name": "rubygem-rexml",
-          "version": "3.3.4",
-          "downloadUrl": "https://github.com/ruby/rexml/archive/refs/tags/v3.3.4.tar.gz"
+          "version": "3.3.9",
+          "downloadUrl": "https://github.com/ruby/rexml/archive/refs/tags/v3.3.9.tar.gz"
         }
       }
     },