Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2024-49761 by upgrading rexml #7104

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

buggmagnet
Copy link
Contributor

@buggmagnet buggmagnet commented Oct 30, 2024

This PR fixes CVE-2024-49761 by upgrading rexml


This change is Reviewable

@buggmagnet buggmagnet added the iOS Issues related to iOS label Oct 30, 2024
@buggmagnet buggmagnet self-assigned this Oct 30, 2024
Copy link

linear bot commented Oct 30, 2024

@buggmagnet buggmagnet force-pushed the fix-rexml-the-boogaloo-empire-strikes-back-ios-910 branch from 7b836aa to 1d980eb Compare October 30, 2024 09:55
@pinkisemils
Copy link
Collaborator

Would it not be better to ignore rexml in it's entirety?

Copy link
Contributor Author

@buggmagnet buggmagnet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can also do that, yes. I'll make the change

Reviewable status: 0 of 4 files reviewed, all discussions resolved

@buggmagnet buggmagnet force-pushed the fix-rexml-the-boogaloo-empire-strikes-back-ios-910 branch from 1d980eb to bc77ad1 Compare October 31, 2024 15:27
@faern
Copy link
Member

faern commented Oct 31, 2024

You still need an expiry date. I pointed this out on slack. No ignore is allowed to be indefinite. See instructions at top of root osv-scanner.toml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
iOS Issues related to iOS
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants