Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update yard dependencies #18929

Merged
merged 1 commit into from
Mar 6, 2024

Conversation

adfoster-r7
Copy link
Contributor

Routine update of Yard dependencies

Verification

Verify the result:

rake yard

@cgranleese-r7 cgranleese-r7 self-assigned this Mar 6, 2024
@cgranleese-r7
Copy link
Contributor

Looks good to me 👍

metasploit-framework (c3eca46) [$?] via  desktop-linux via  v3.0.5 via ⍱ took 2s
❯ bundle exec rake yard
Ignoring sqlite3-1.6.3 because its extensions are not built. Try: gem pristine sqlite3 --version 1.6.3
[warn]: @param tag has unknown parameter name: containing
    in file `lib/msf/core/exploit/git.rb' near line 26
[warn]: @param tag has unknown parameter name: the
    in file `lib/msf/core/exploit/git.rb' near line 54
[warn]: @param tag has unknown parameter name: entries
    in file `lib/msf/core/exploit/git.rb' near line 68
[warn]: @param tag has unknown parameter name: the
    in file `lib/msf/core/exploit/git.rb' near line 90
[warn]: @param tag has unknown parameter name: list
    in file `lib/msf/core/exploit/git.rb' near line 103
[warn]: Unknown tag @Example in file `lib/msf/core/db_connector.rb` near line 60
[warn]: Unknown tag @nodoc in file `lib/msf/core/module/alert.rb` near line 124
[warn]: @param tag has unknown parameter name: Integer
    in file `lib/msf/core/exploit/retry.rb' near line 8
[warn]: @param tag has unknown parameter name: mod
    in file `lib/msf/core/opt_condition.rb' near line 29
[warn]: @param tag has duplicate parameter name: opts
    in file `lib/msf/core/db_manager/user.rb' near line 114
[warn]: @param tag has duplicate parameter name: opts
...

@cgranleese-r7 cgranleese-r7 merged commit c411802 into rapid7:master Mar 6, 2024
47 of 48 checks passed
@cgranleese-r7 cgranleese-r7 added the rn-no-release-notes no release notes label Mar 6, 2024
@adfoster-r7 adfoster-r7 added rn-documentation release notes for Metasploit Framework documentation and removed rn-no-release-notes no release notes labels Mar 7, 2024
@adfoster-r7
Copy link
Contributor Author

Release Notes

Updates the Metasploit API documentation library to the latest available version to avoid CVE-2024-27285 - an XSS in the default YARD template. Thanks to Aviv Keller for reporting.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
rn-documentation release notes for Metasploit Framework documentation
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants