Pin rexml to avoid winrm warnings

adfoster-r7 · adfoster-r7 · commit 8d35eb975d90 · 2025-10-24T10:29:00.000+01:00
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -96,6 +96,7 @@ PATH
       rex-struct2
       rex-text
       rex-zip
+      rexml (= 3.4.1)
       rinda
       ruby-macho
       ruby-mysql
@@ -529,7 +530,7 @@ GEM
       bigdecimal
     rex-zip (0.1.6)
       rex-text
-    rexml (3.4.4)
+    rexml (3.4.1)
     rinda (0.2.0)
       drb
       forwardable
diff --git a/metasploit-framework.gemspec b/metasploit-framework.gemspec
@@ -157,6 +157,8 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'net-smtp'
   spec.add_runtime_dependency 'net-sftp'
   spec.add_runtime_dependency 'winrm'
+  # Pinned to avoid WinRM warnings: https://github.com/WinRb/WinRM/issues/355 - if bumping verify windows/winrm/winrm_script_exec works against metasploitable with vagrant/vagrant creds 
+  spec.add_runtime_dependency 'rexml', '3.4.1'
   spec.add_runtime_dependency 'ffi', '< 1.17.0'
 
   #

Original file line number	Diff line number	Diff line change
`@@ -157,6 +157,8 @@ Gem::Specification.new do \|spec\|`
`157`	`157`	`spec.add_runtime_dependency 'net-smtp'`
`158`	`158`	`spec.add_runtime_dependency 'net-sftp'`
`159`	`159`	`spec.add_runtime_dependency 'winrm'`
	`160`	`+ # Pinned to avoid WinRM warnings: https://github.com/WinRb/WinRM/issues/355 - if bumping verify windows/winrm/winrm_script_exec works against metasploitable with vagrant/vagrant creds`
	`161`	`+ spec.add_runtime_dependency 'rexml', '3.4.1'`
`160`	`162`	`spec.add_runtime_dependency 'ffi', '< 1.17.0'`
`161`	`163`
`162`	`164`	`#`