Will there come a resolution for CVE-2024-0056 in release/4.1 branch?

[henk-van-der-vaart]

Will the "Fixed encryption downgrade issue. CVE-2024-0056" also be resolved (mitigated) for release/4.1 branch?
Now only 2.1, 3.1, 4.0 and 5 branches are updated by @DavoudEshtehari .

At this moment we use Microsoft.Data.SqlClient NuGet package 4.1.0 (for .NET Framework "context")
It seems that the release/4.0 branch is actively maintained which seems not the case for release/4.1 branch.

Maybe someone can indicate the status of release/4.1 branch compared to release/4.0 branch.

[ErikEJ]

4.1 is out of support, you must use 5.x or 4.0

https://learn.microsoft.com/en-us/sql/connect/ado-net/sqlclient-driver-support-lifecycle?view=sql-server-ver16

[henk-van-der-vaart]

@ErikEJ - Thanks for the reply/info inclusive the link - we will switch over to most probably 4.0
And keep in mind potential upgrade issues due to lower file version.

It would be nice that somehow in NuGet also an "out of support" indication would have been visible.
But that is outside the scope - I will close this raised issue.

[ErikEJ]

@henk-van-der-vaart There is:

[henk-van-der-vaart]

@ErikEJ - I noticed the triangle notification however it indicates for 4.1.0 and 4.1.1 it is deprecated because it has critical bugs.
So no explicit mention of out-of-support. Never mind - I know how to continue. Once more thanks