Skip to content

updating Microsoft.Data.SqlClient to cover CVE warning #53589

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jan 24, 2024
Merged

updating Microsoft.Data.SqlClient to cover CVE warning #53589

merged 1 commit into from
Jan 24, 2024

Conversation

@mgravell
Copy link
Contributor

@mgravell mgravell commented Jan 24, 2024 •
edited
Loading

Build ops; current CI is generating:

2024-01-23T20:12:02.4087726Z _________________________________________________________________________________________________________________________________________________
2024-01-23T20:12:02.4088166Z |Security Alerts                                                                                                                                |
2024-01-23T20:12:02.4088585Z |_______________________________________________________________________________________________________________________________________________|
2024-01-23T20:12:02.4088956Z |Alert title                             |Affected component                      |Severity                      |Due date                      |
2024-01-23T20:12:02.4089268Z |________________________________________|________________________________________|______________________________|______________________________|
2024-01-23T20:12:02.4089996Z |CVE-2024-0056                           |Microsoft.Data.SqlClient 4.0.1          |High                          |2024-02-16T09:15:40.1351132Z  |
2024-01-23T20:12:02.4090343Z |________________________________________|________________________________________|______________________________|______________________________|

Trying to resolve; note that "current" is 5.1.4, am tempted to jump major, but let's see if small bump works, first (major only to net9, minor should be safer to backport)

@mgravell mgravell requested review from a team and wtgodbe as code owners January 24, 2024 15:19
@ghost ghost added the area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework label Jan 24, 2024
@mgravell mgravell merged commit 1e3b308 into main Jan 24, 2024
@mgravell mgravell deleted the buildops/sqlclient branch January 24, 2024 22:06
@ghost ghost added this to the 9.0-preview1 milestone Jan 24, 2024
@wtgodbe wtgodbe modified the milestones: 9.0-preview1, 9.0-preview2 Jan 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wtgodbe wtgodbe wtgodbe approved these changes

Assignees

No one assigned

Labels

area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

Projects

None yet

Milestone

9.0-preview2

Development

Successfully merging this pull request may close these issues.

3 participants

@mgravell @wtgodbe