Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.0.0.7 - Cycle Release - LottoDataManagerSetup_v1.0.0.7_Release #20

Merged
merged 7 commits into from
Sep 29, 2021

Conversation

angelsburger90
Copy link
Contributor

  • Clear out Add Bet content Form when exiting from Pick Generator
  • Implement copying of selected bet list thru ctrl+c shortcut
  • Implement selection of all bets on the list view thru ctrl+a shortcut
  • Latest Jackpot, if latest is jackpot, then show the minimum jackpot
  • When deleting a bet, ensure that the cancel button is focus first
  • Refresh the main dashboard if a bet was deleted.
  • Fixed saving the last opened lottery
  • When moving the bet dates, it will now able to save to the current date.
  • Improve Packaging Script
  • Add app and uninstall icon
  • Improve Publishers name
  • When changing database from with and without contents, ensure that the draw result listview has been refresh.
  • Fix null exception if when querying for latest bets and jackpot for each lottery when database has no records.
  • Improve listing of processing logs
  • Resolving Dot Net config issue
  • Fix Critical Severity - System.Text.Encodings.Web vulnerability found in packages.config 28 minutes ago

System.Text.Encodings.Web vulnerability found in packages.config 28 minutes ago
Remediation

Upgrade System.Text.Encodings.Web to version 5.0.1 or later. For example:

<package id="System.Text.Encodings.Web" version="5.0.1" />

Always verify the validity and compatibility of suggestions with your codebase.
Details
CVE-2021-26701
critical severity
Vulnerable versions: = 5.0.0
Patched version: 5.0.1

.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112.
Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1, and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A remote code execution vulnerability exists in .NET 5 and .NET Core due to how text encoding is performed.
Discussion

Discussion for this issue can be found at dotnet/runtime#49377
Mitigation factors

Microsoft has not identified any mitigating factors for this vulnerability.
Affected software

The vulnerable package is System.Text.Encodings.Web . Upgrading your package and redeploying your app should be sufficient to address this vulnerability.

Vulnerable package versions:

Any .NET 5, .NET Core, or .NET Framework based application that uses the System.Text.Encodings.Web package with a vulnerable version listed below.
Package Name 	Vulnerable Versions 	Secure Versions
System.Text.Encodings.Web 	4.0.0 - 4.5.0 	4.5.1
System.Text.Encodings.Web 	4.6.0-4.7.1 	4.7.2
System.Text.Encodings.Web 	5.0.0 	5.0.1

Please validate that each of the .NET versions you are using is in support. Security updates are only provided for supported .NET versions.
"System.IO.FileNotFoundException
  HResult=0x80070002
  Message=Could not load file or assembly 'System.Numerics.Vectors, Version=4.1.3.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' or one of its dependencies. The system cannot find the file specified."
… each lottery when database has no records.

- Improve listing of processing logs
- Add app and uninstall icon
- Improve Publishers name
- Implement copying of selected bet list thru ctrl+c shortcut
- Implement selection of all bets on the list view thru ctrl+a shortcut
- Latest Jackpot, if latest is jackpot, then show the minimum jackpot
- When deleting a bet, ensure that the cancel button is focus first
- Refresh the main dashboard if a bet was deleted.
- Fixed saving the last opened lottery
- When moving the bet dates, it will now able to save to the current date.
Test Version 1.0.0.7
- Clear out Add Bet content Form when exiting from Pick Generator
- Implement copying of selected bet list thru ctrl+c shortcut
- Implement selection of all bets on the list view thru ctrl+a shortcut
- Latest Jackpot, if latest is jackpot, then show the minimum jackpot
- When deleting a bet, ensure that the cancel button is focus first
- Refresh the main dashboard if a bet was deleted.
- Fixed saving the last opened lottery
- When moving the bet dates, it will now able to save to the current date.
- Improve Packaging Script
- Add app and uninstall icon
- Improve Publishers name
- When changing database from with and without contents, ensure that the draw result listview has been refresh.
- Fix null exception if when querying for latest bets and jackpot for each lottery when database has no records.
- Improve listing of processing logs
- Resolving Dot Net config issue
- Fix Critical Severity - System.Text.Encodings.Web vulnerability found in packages.config 28 minutes ago
@angelsburger90 angelsburger90 added bug Something isn't working enhancement New feature or request labels Sep 29, 2021
@angelsburger90 angelsburger90 self-assigned this Sep 29, 2021
@angelsburger90 angelsburger90 merged commit ac017d6 into master Sep 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant