* SECURITY UPDATE: REXML DoS via attribute value with many '>' characters - debian/patches/CVE-2024-35176.patch: replace the per-'>'-chunk re-read loop in parse_attributes with a single-pass read of the attribute value up to the closing quote followed by a read up to the actual tag end, so that an attribute value containing N repeated '>' characters parses in O(N) time instead of O(N**2). Also fix the latent EOF handling in IOSource#match introduced with CVE-2024-41123 so the partially-filled buffer is matched against the pattern one last time before the source is declared exhausted, which is now exercised by the new value-rest read. - CVE-2024-35176 * SECURITY UPDATE: REXML ReDoS via repeated spaces in ATTLIST - debian/patches/CVE-2024-39908.patch: strip the matched ATTLIST contents before applying ATTDEF_RE so that trailing whitespace after a valid attdef does not trigger catastrophic backtracking in the per-attdef scan. Adapted byte-identically from upstream ruby/rexml@1f1e6e9; the other eight commits referenced by this CVE address O(N**2) source.match interactions that are already mitigated here by the min_bytes-doubling introduced in the CVE-2024-41123 backport (verified by microbench against all eight upstream test vectors at N=200000). - CVE-2024-39908