Skip to content

[5.1] CVE-2024-43485 - Update System.Text.Json to 6.0.11 #3279

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Apr 17, 2025
Merged

[5.1] CVE-2024-43485 - Update System.Text.Json to 6.0.11 #3279

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
0dbd6ba
Bug 34161: [Component Governance Alert] - CVE-2024-43485 in System.Te…
paulmedynski Apr 16, 2025
14f02c0
CVE-2024-43483 - Update Microsoft.Extensions.Caching.Memory to 6.0.3 …
paulmedynski Apr 16, 2025
de6c5aa
CVE-2024-43483 - Update Microsoft.Extensions.Caching.Memory to 6.0.3 …
paulmedynski Apr 17, 2025
e53e52f
CVE-2024-43483 - Update Microsoft.Extensions.Caching.Memory to 6.0.3 …
paulmedynski Apr 17, 2025
b91d81d
Added TSAUpload bug workaround to TSA options config.
paulmedynski Apr 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
CVE-2024-43483 - Update Microsoft.Extensions.Caching.Memory to 6.0.3 … 
…for AKV

- Updated System.Text.Json to 6.0.11
- Fixed MDS versions in AKV .nuspec
  • Loading branch information
@paulmedynski
paulmedynski committed Apr 17, 2025
commit de6c5aa203a4e3207ab99ad4922c626b79443c2b
2 changes: 1 addition & 1 deletion tools/props/Versions.props
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
<MicrosoftIdentityModelJsonWebTokensVersion>6.35.0</MicrosoftIdentityModelJsonWebTokensVersion>
<SystemBuffersVersion>4.5.1</SystemBuffersVersion>
<SystemTextEncodingsWebVersion>6.0.0</SystemTextEncodingsWebVersion>
<SystemTextJsonVersion>6.0.10</SystemTextJsonVersion>
<SystemTextJsonVersion>6.0.11</SystemTextJsonVersion>
</PropertyGroup>
<!-- NetCore project dependencies -->
<PropertyGroup>
Expand Down
2 changes: 1 addition & 1 deletion tools/specs/Microsoft.Data.SqlClient.nuspec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ When using NuGet 3.x this package requires at least version 3.4.</description>
<dependency id="System.Configuration.ConfigurationManager" version="6.0.1" exclude="Compile" />
<dependency id="System.Runtime.InteropServices.RuntimeInformation" version="4.3.0" />
<dependency id="System.Text.Encodings.Web" version="6.0.0" />
<dependency id="System.Text.Json" version="6.0.10" />
<dependency id="System.Text.Json" version="6.0.11" />
</group>
<group targetFramework="net6.0">
<dependency id="Microsoft.Data.SqlClient.SNI.runtime" version="5.1.1" exclude="Compile" />
Expand Down
6 changes: 3 additions & 3 deletions tools/specs/add-ons/Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.nuspec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,21 +25,21 @@ Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyStoreProvider.SqlColumnEncrypti
<tags>sqlclient microsoft.data.sqlclient azurekeyvaultprovider akvprovider alwaysencrypted</tags>
<dependencies>
<group targetFramework="net462">
<dependency id="Microsoft.Data.SqlClient" version="3.0.0" />
<dependency id="Microsoft.Data.SqlClient" version="[5.1.3,5.2.0)" />
<dependency id="Azure.Core" version="[1.38.0,2.0.0)" />
<dependency id="System.Text.Encodings.Web" version="6.0.0" />
<dependency id="Azure.Security.KeyVault.Keys" version="[4.4.0,5.0.0)" />
<dependency id="Microsoft.Extensions.Caching.Memory" version="6.0.3" />
</group>
<group targetFramework="net6.0">
<dependency id="Microsoft.Data.SqlClient" version="3.0.0" />
<dependency id="Microsoft.Data.SqlClient" version="[5.1.3,5.2.0)" />
<dependency id="Azure.Core" version="[1.38.0,2.0.0)" />
<dependency id="System.Text.Encodings.Web" version="6.0.0" />
<dependency id="Azure.Security.KeyVault.Keys" version="[4.4.0,5.0.0)" />
<dependency id="Microsoft.Extensions.Caching.Memory" version="6.0.3" />
</group>
<group targetFramework="netstandard2.0">
<dependency id="Microsoft.Data.SqlClient" version="3.0.0" />
<dependency id="Microsoft.Data.SqlClient" version="[5.1.3,5.2.0)" />
<dependency id="Azure.Core" version="[1.38.0,2.0.0)" />
<dependency id="System.Text.Encodings.Web" version="6.0.0" />
<dependency id="Azure.Security.KeyVault.Keys" version="[4.4.0,5.0.0)" />
Expand Down
Loading