Am Wednesday 22 June 2005 11:41 schrieb Hugh Sasse: > I've just seen this (by RSS) > > http://www.securityfocus.com/bid/14016 I don't see a diff on this page, but I guess it's the same patch I applied last Sunday: * lib/xmlrpc/utils.rb: Patch by Nobuhiro IMAI fixes the following problem: Default value modification on Module#public_instance_methods (false -> true) breaks s.add_handler(XMLRPC::iPIMethods("sample"), MyHandler.new) style security protection. Can anybody confirm? I commited this to HEAD. How can I backport this into the Ruby 1.8.x line? Regards, Michael