Skip to content

Commit 9f02d77

Browse files
authored
Add reference to System.Security.Cryptography.Xml (#198)
Context: https://dev.azure.com/xamarin/public/_componentGovernance/115226/alert/8008980?typeId=5585428&pipelinesTrackingFilter=1 We've receieved an alert about our usage of the 6.0.0 version of `System.Security.Cryptography.Xml`. This package is brought in through the [Microsoft.Build.Tasks.Core][0] package reference. An explicit reference to `System.Security.Cryptography.Xml` 6.0.1 should bring in the fix for CVE-2022-34716. [0]: https://www.nuget.org/packages/Microsoft.Build.Tasks.Core/17.3.2#dependencies-body-tab
1 parent fa3711b commit 9f02d77

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

src/Microsoft.Android.Build.BaseTasks/MSBuildReferences.projitems

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@
1414
<PackageReference Include="Microsoft.Build.Framework" Version="$(MSBuildPackageReferenceVersion)" />
1515
<PackageReference Include="Microsoft.Build.Tasks.Core" Version="$(MSBuildPackageReferenceVersion)" />
1616
<PackageReference Include="Microsoft.Build.Utilities.Core" Version="$(MSBuildPackageReferenceVersion)" />
17+
<PackageReference Include="System.Security.Cryptography.Xml" Version="6.0.1" />
1718
<PackageReference Include="K4os.Compression.LZ4" Version="1.1.11" />
1819
<PackageReference Include="Xamarin.Build.AsyncTask" Version="0.4.0" GeneratePathProperty="true" />
1920
<PackageReference Include="Xamarin.LibZipSharp" Version="$(LibZipSharpVersion)" GeneratePathProperty="true" />

0 commit comments

Comments
 (0)