Skip to content

Commit

Permalink
Add reference to System.Security.Cryptography.Xml (#198)
Browse files Browse the repository at this point in the history
Context: https://dev.azure.com/xamarin/public/_componentGovernance/115226/alert/8008980?typeId=5585428&pipelinesTrackingFilter=1

We've receieved an alert about our usage of the 6.0.0 version of
`System.Security.Cryptography.Xml`.  This package is brought in through
the [Microsoft.Build.Tasks.Core][0] package reference.  An explicit
reference to `System.Security.Cryptography.Xml` 6.0.1 should bring in
the fix for CVE-2022-34716.

[0]: https://www.nuget.org/packages/Microsoft.Build.Tasks.Core/17.3.2#dependencies-body-tab
  • Loading branch information
pjcollins committed Nov 30, 2022
1 parent fa3711b commit 9f02d77
Showing 1 changed file with 1 addition and 0 deletions.
Expand Up @@ -14,6 +14,7 @@
<PackageReference Include="Microsoft.Build.Framework" Version="$(MSBuildPackageReferenceVersion)" />
<PackageReference Include="Microsoft.Build.Tasks.Core" Version="$(MSBuildPackageReferenceVersion)" />
<PackageReference Include="Microsoft.Build.Utilities.Core" Version="$(MSBuildPackageReferenceVersion)" />
<PackageReference Include="System.Security.Cryptography.Xml" Version="6.0.1" />
<PackageReference Include="K4os.Compression.LZ4" Version="1.1.11" />
<PackageReference Include="Xamarin.Build.AsyncTask" Version="0.4.0" GeneratePathProperty="true" />
<PackageReference Include="Xamarin.LibZipSharp" Version="$(LibZipSharpVersion)" GeneratePathProperty="true" />
Expand Down

0 comments on commit 9f02d77

Please sign in to comment.