Longw/remove win rexml (#1341)

* remove rexml in win * update to remove rexml by force as all dependency are for development
microsoft · Jan 15, 2025 · 6b25c9d · 6b25c9d
1 parent f756bad
commit 6b25c9d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.trivyignore b/.trivyignore
@@ -1,5 +1,9 @@
 #telegraf CRITICAL
 CVE-2024-41110
+CVE-2024-45337
+
+#telegraf HIGH
+CVE-2024-45338
 
 #telegraf MEDIUM
 CVE-2024-35255

diff --git a/kubernetes/windows/Dockerfile b/kubernetes/windows/Dockerfile
@@ -31,6 +31,7 @@ RUN refreshenv \
 && gem install gyoku -v 1.3.1 \
 && gem install ipaddress -v 0.8.3 \
 && gem install jwt -v 2.7.1 \
+&& gem uninstall rexml -v 3.2.5 --force \
 && gem sources --clear-all
 
 # Remove gem cache and chocolatey