-
Notifications
You must be signed in to change notification settings - Fork 292
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[5.1.6] | CVE | Update Azure.Identity from 1.11.3 to 1.11.4 #2649
[5.1.6] | CVE | Update Azure.Identity from 1.11.3 to 1.11.4 #2649
Conversation
@DavoudEshtehari Should I close #2578 then? |
@ErikEJ Thank you for mentioning your PRs here. I hesitated to remove MIC on servicing versions. |
@DavoudEshtehari Agree, I will close my PRs |
LGTM |
This was fixed in the main branch by #2577 Wouldn't it make sense to use that change for the 5.1 branch too? Also, here is a request to bump further: #1108 (comment) |
This is already asked by Erik and he's agree with the argue. |
Ok, but what about #1108 (comment)? |
Have you tried adding an Explict reference to the latest version?? |
Yes, I'm already doing that. |
can we please get a patch out for this |
@SimonCropp and others: Please read this: https://devblogs.microsoft.com/nuget/nugetaudit-2-0-elevating-security-and-trust-in-package-management/ In particular the section "Recommended way to resolve warnings" |
@ErikEJ that doc is poorly worded. it should be phrased
we are are now at the second part. |
if this is important enough to be included in a hotfix for an older version, doesnt it also qualify for a release of hotfix on the current version? |
Addresses CVE-2024-35255