[CVE] Resolve CVEs by adding dependencies of newer version. (#21638)

* Resolve CVEs by adding dependencies of newer version. * Restore denpendencies in Compute
Azure · Apr 24, 2023 · 193a401 · 193a401
1 parent f9b1289
commit 193a401
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/src/Compute/Compute/Compute.csproj b/src/Compute/Compute/Compute.csproj
@@ -18,9 +18,10 @@
     <PackageReference Include="Microsoft.Azure.Management.Compute" Version="60.0.0" />
     <PackageReference Include="System.Security.Permissions" Version="4.5.0" />
     <PackageReference Include="System.ServiceModel.Primitives" Version="4.7.0" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="7.0.1" />
     <PackageReference Include="WindowsAzure.Storage" Version="9.3.0" />
     <PackageReference Include="System.Management" Version="4.5.0" />
+    <!-- Include the following DLLs for security issue -->
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="7.0.1" />
   </ItemGroup>
 
   <ItemGroup>

diff --git a/src/DataFactory/DataFactories/DataFactories.csproj b/src/DataFactory/DataFactories/DataFactories.csproj
@@ -15,8 +15,10 @@
     <PackageReference Include="Microsoft.Azure.Management.DataFactories" Version="4.13.3" />
     <PackageReference Include="Microsoft.DataTransfer.Gateway.Encryption" Version="4.14.7587.7" />
     <PackageReference Include="System.IO.FileSystem.AccessControl" Version="4.5.0" />
-    <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
     <PackageReference Include="WindowsAzure.Storage" Version="9.3.0" />
+    <!-- Include the following DLLs for security issue -->
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
+    <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
   </ItemGroup>
 
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildThisFileDirectory).., build.proj))\src\Az.Post.props" />

diff --git a/src/DataFactory/DataFactoryV2/DataFactoryV2.csproj b/src/DataFactory/DataFactoryV2/DataFactoryV2.csproj
@@ -14,6 +14,8 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.Azure.Management.DataFactory" Version="9.2.0" />
     <PackageReference Include="Microsoft.DataTransfer.Gateway.Encryption" Version="4.14.7587.7" />
+    <!-- Include the following DLLs for security issue -->
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
     <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
   </ItemGroup>
 

diff --git a/src/Synapse/Synapse/Synapse.csproj b/src/Synapse/Synapse/Synapse.csproj
@@ -18,7 +18,9 @@
     <PackageReference Include="Azure.Analytics.Synapse.Spark" Version="1.0.0-preview.7" />
     <PackageReference Include="Microsoft.Azure.Management.Synapse" Version="2.6.0-preview" />
     <PackageReference Include="Microsoft.DataTransfer.Gateway.Encryption" Version="4.14.7587.7" />
+    <!-- Include the following DLLs for security issue -->
     <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
+    <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
   </ItemGroup>
 
   <ItemGroup>