Skip to content

Commit 3a28feb

Browse files
DavidParks8DavidParks8
committed
fix vulnerabilities by upgrading Microsoft.Owin packages
1 parent 86488b3 commit 3a28feb

37 files changed

+168
-150
lines changed

‎samples/MVC Classic/MVC Classic.csproj‎

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
<?xml version="1.0" encoding="utf-8"?>
22
<Project ToolsVersion="14.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
3+
<Import Project="..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props" Condition="Exists('..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props')" />
34
<Import Project="..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props" Condition="Exists('..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props')" />
4-
<Import Project="..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props" Condition="Exists('..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props')" />
55
<Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
66
<PropertyGroup>
77
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
@@ -54,13 +54,11 @@
5454
<Private>True</Private>
5555
</Reference>
5656
<Reference Include="Microsoft.CSharp" />
57-
<Reference Include="Microsoft.Owin, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
58-
<HintPath>..\..\packages\Microsoft.Owin.3.0.1\lib\net45\Microsoft.Owin.dll</HintPath>
59-
<Private>True</Private>
57+
<Reference Include="Microsoft.Owin, Version=4.2.2.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
58+
<HintPath>..\..\packages\Microsoft.Owin.4.2.2\lib\net45\Microsoft.Owin.dll</HintPath>
6059
</Reference>
61-
<Reference Include="Microsoft.Owin.Host.SystemWeb, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
62-
<HintPath>..\..\packages\Microsoft.Owin.Host.SystemWeb.3.0.1\lib\net45\Microsoft.Owin.Host.SystemWeb.dll</HintPath>
63-
<Private>True</Private>
60+
<Reference Include="Microsoft.Owin.Host.SystemWeb, Version=4.2.2.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
61+
<HintPath>..\..\packages\Microsoft.Owin.Host.SystemWeb.4.2.2\lib\net45\Microsoft.Owin.Host.SystemWeb.dll</HintPath>
6462
</Reference>
6563
<Reference Include="Microsoft.Owin.Security.Authorization, Version=1.1.0.1, Culture=neutral, PublicKeyToken=ba8e29017989cc66, processorArchitecture=MSIL">
6664
<HintPath>..\..\packages\Microsoft.Owin.Security.Authorization.1.1.0.1\lib\net452\Microsoft.Owin.Security.Authorization.dll</HintPath>
@@ -199,8 +197,8 @@
199197
<PropertyGroup>
200198
<ErrorText>This project references NuGet package(s) that are missing on this computer. Use NuGet Package Restore to download them. For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
201199
</PropertyGroup>
202-
<Error Condition="!Exists('..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props')" Text="$([System.String]::Format('$(ErrorText)', '..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props'))" />
203200
<Error Condition="!Exists('..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props')" Text="$([System.String]::Format('$(ErrorText)', '..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props'))" />
201+
<Error Condition="!Exists('..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props')" Text="$([System.String]::Format('$(ErrorText)', '..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props'))" />
204202
</Target>
205203
<!-- To modify your build process, add your task inside one of the targets below and uncomment it.
206204
Other similar extension points exist, see Microsoft.Common.targets.

‎samples/MVC Classic/Web.config‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,14 @@
4343
<assemblyIdentity name="Microsoft.Owin.Security.Authorization" publicKeyToken="ba8e29017989cc66" culture="neutral" />
4444
<bindingRedirect oldVersion="0.0.0.0-1.1.0.1" newVersion="1.1.0.1" />
4545
</dependentAssembly>
46+
<dependentAssembly>
47+
<assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
48+
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
49+
</dependentAssembly>
50+
<dependentAssembly>
51+
<assemblyIdentity name="Microsoft.Owin.Host.SystemWeb" publicKeyToken="31bf3856ad364e35" culture="neutral" />
52+
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
53+
</dependentAssembly>
4654
</assemblyBinding>
4755
</runtime>
4856
<system.codedom>

‎samples/MVC Classic/packages.config‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,9 @@
66
<package id="Microsoft.AspNet.Web.Optimization" version="1.1.3" targetFramework="net452" />
77
<package id="Microsoft.AspNet.WebPages" version="3.2.3" targetFramework="net452" />
88
<package id="Microsoft.CodeDom.Providers.DotNetCompilerPlatform" version="1.0.2" targetFramework="net452" />
9-
<package id="Microsoft.Net.Compilers" version="1.3.2" targetFramework="net452" developmentDependency="true" />
10-
<package id="Microsoft.Owin" version="3.0.1" targetFramework="net452" />
11-
<package id="Microsoft.Owin.Host.SystemWeb" version="3.0.1" targetFramework="net452" />
9+
<package id="Microsoft.Net.Compilers" version="4.2.0" targetFramework="net462" developmentDependency="true" />
10+
<package id="Microsoft.Owin" version="4.2.2" targetFramework="net462" />
11+
<package id="Microsoft.Owin.Host.SystemWeb" version="4.2.2" targetFramework="net462" />
1212
<package id="Microsoft.Owin.Security.Authorization" version="1.1.0.1" targetFramework="net452" />
1313
<package id="Microsoft.Owin.Security.Authorization.Mvc" version="1.1.0.1" targetFramework="net452" />
1414
<package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net452" />

‎samples/MVC OWIN/MVC OWIN.csproj‎

Lines changed: 11 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
<?xml version="1.0" encoding="utf-8"?>
22
<Project ToolsVersion="12.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
3+
<Import Project="..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props" Condition="Exists('..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props')" />
34
<Import Project="..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props" Condition="Exists('..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props')" />
4-
<Import Project="..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props" Condition="Exists('..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props')" />
55
<Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
66
<PropertyGroup>
77
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
@@ -49,32 +49,29 @@
4949
<Private>True</Private>
5050
</Reference>
5151
<Reference Include="Microsoft.CSharp" />
52-
<Reference Include="Microsoft.Owin, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
53-
<HintPath>..\..\packages\Microsoft.Owin.3.0.1\lib\net45\Microsoft.Owin.dll</HintPath>
54-
<Private>True</Private>
52+
<Reference Include="Microsoft.Owin, Version=4.2.2.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
53+
<HintPath>..\..\packages\Microsoft.Owin.4.2.2\lib\net45\Microsoft.Owin.dll</HintPath>
5554
</Reference>
56-
<Reference Include="Microsoft.Owin.Host.SystemWeb, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
57-
<HintPath>..\..\packages\Microsoft.Owin.Host.SystemWeb.3.0.1\lib\net45\Microsoft.Owin.Host.SystemWeb.dll</HintPath>
58-
<Private>True</Private>
55+
<Reference Include="Microsoft.Owin.Host.SystemWeb, Version=4.2.2.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
56+
<HintPath>..\..\packages\Microsoft.Owin.Host.SystemWeb.4.2.2\lib\net45\Microsoft.Owin.Host.SystemWeb.dll</HintPath>
5957
</Reference>
60-
<Reference Include="Microsoft.Owin.Security, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
61-
<HintPath>..\..\packages\Microsoft.Owin.Security.3.0.1\lib\net45\Microsoft.Owin.Security.dll</HintPath>
62-
<Private>True</Private>
58+
<Reference Include="Microsoft.Owin.Security, Version=4.2.2.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
59+
<HintPath>..\..\packages\Microsoft.Owin.Security.4.2.2\lib\net45\Microsoft.Owin.Security.dll</HintPath>
6360
</Reference>
6461
<Reference Include="Microsoft.Owin.Security.Authorization, Version=1.1.0.1, Culture=neutral, PublicKeyToken=ba8e29017989cc66, processorArchitecture=MSIL">
6562
<HintPath>..\..\packages\Microsoft.Owin.Security.Authorization.1.1.0.1\lib\net452\Microsoft.Owin.Security.Authorization.dll</HintPath>
6663
</Reference>
6764
<Reference Include="Microsoft.Owin.Security.Authorization.Mvc, Version=1.1.0.1, Culture=neutral, PublicKeyToken=ba8e29017989cc66, processorArchitecture=MSIL">
6865
<HintPath>..\..\packages\Microsoft.Owin.Security.Authorization.Mvc.1.1.0.1\lib\net452\Microsoft.Owin.Security.Authorization.Mvc.dll</HintPath>
6966
</Reference>
70-
<Reference Include="Microsoft.Owin.Security.Cookies, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
71-
<HintPath>..\..\packages\Microsoft.Owin.Security.Cookies.3.0.1\lib\net45\Microsoft.Owin.Security.Cookies.dll</HintPath>
72-
<Private>True</Private>
67+
<Reference Include="Microsoft.Owin.Security.Cookies, Version=4.2.2.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
68+
<HintPath>..\..\packages\Microsoft.Owin.Security.Cookies.4.2.2\lib\net45\Microsoft.Owin.Security.Cookies.dll</HintPath>
7369
</Reference>
7470
<Reference Include="Owin, Version=1.0.0.0, Culture=neutral, PublicKeyToken=f0ebd12fd5e55cc5, processorArchitecture=MSIL">
7571
<HintPath>..\..\packages\Owin.1.0\lib\net40\Owin.dll</HintPath>
7672
<Private>True</Private>
7773
</Reference>
74+
<Reference Include="System.Security" />
7875
<Reference Include="System.Web.DynamicData" />
7976
<Reference Include="System.Web.Entity" />
8077
<Reference Include="System.Web.ApplicationServices" />
@@ -175,8 +172,8 @@
175172
<PropertyGroup>
176173
<ErrorText>This project references NuGet package(s) that are missing on this computer. Use NuGet Package Restore to download them. For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
177174
</PropertyGroup>
178-
<Error Condition="!Exists('..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props')" Text="$([System.String]::Format('$(ErrorText)', '..\..\packages\Microsoft.Net.Compilers.1.3.2\build\Microsoft.Net.Compilers.props'))" />
179175
<Error Condition="!Exists('..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props')" Text="$([System.String]::Format('$(ErrorText)', '..\..\packages\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.1.0.2\build\Microsoft.CodeDom.Providers.DotNetCompilerPlatform.props'))" />
176+
<Error Condition="!Exists('..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props')" Text="$([System.String]::Format('$(ErrorText)', '..\..\packages\Microsoft.Net.Compilers.4.2.0\build\Microsoft.Net.Compilers.props'))" />
180177
</Target>
181178
<!-- To modify your build process, add your task inside one of the targets below and uncomment it.
182179
Other similar extension points exist, see Microsoft.Common.targets.

‎samples/MVC OWIN/Web.config‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,14 @@
3232
<assemblyIdentity name="Microsoft.Owin.Security.Authorization" publicKeyToken="ba8e29017989cc66" culture="neutral" />
3333
<bindingRedirect oldVersion="0.0.0.0-1.1.0.1" newVersion="1.1.0.1" />
3434
</dependentAssembly>
35+
<dependentAssembly>
36+
<assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
37+
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
38+
</dependentAssembly>
39+
<dependentAssembly>
40+
<assemblyIdentity name="Microsoft.Owin.Host.SystemWeb" publicKeyToken="31bf3856ad364e35" culture="neutral" />
41+
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
42+
</dependentAssembly>
3543
</assemblyBinding>
3644
</runtime>
3745
<system.codedom>

‎samples/MVC OWIN/packages.config‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,13 +4,13 @@
44
<package id="Microsoft.AspNet.Razor" version="3.2.3" targetFramework="net452" />
55
<package id="Microsoft.AspNet.WebPages" version="3.2.3" targetFramework="net452" />
66
<package id="Microsoft.CodeDom.Providers.DotNetCompilerPlatform" version="1.0.2" targetFramework="net452" />
7-
<package id="Microsoft.Net.Compilers" version="1.3.2" targetFramework="net452" developmentDependency="true" />
8-
<package id="Microsoft.Owin" version="3.0.1" targetFramework="net452" />
9-
<package id="Microsoft.Owin.Host.SystemWeb" version="3.0.1" targetFramework="net452" />
10-
<package id="Microsoft.Owin.Security" version="3.0.1" targetFramework="net452" />
7+
<package id="Microsoft.Net.Compilers" version="4.2.0" targetFramework="net462" developmentDependency="true" />
8+
<package id="Microsoft.Owin" version="4.2.2" targetFramework="net462" />
9+
<package id="Microsoft.Owin.Host.SystemWeb" version="4.2.2" targetFramework="net462" />
10+
<package id="Microsoft.Owin.Security" version="4.2.2" targetFramework="net462" />
1111
<package id="Microsoft.Owin.Security.Authorization" version="1.1.0.1" targetFramework="net452" />
1212
<package id="Microsoft.Owin.Security.Authorization.Mvc" version="1.1.0.1" targetFramework="net452" />
13-
<package id="Microsoft.Owin.Security.Cookies" version="3.0.1" targetFramework="net452" />
13+
<package id="Microsoft.Owin.Security.Cookies" version="4.2.2" targetFramework="net462" />
1414
<package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net452" />
1515
<package id="Owin" version="1.0" targetFramework="net452" />
1616
</packages>

‎samples/WebApi Autofac/Web.config‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
2121
<dependentAssembly>
2222
<assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
23-
<bindingRedirect oldVersion="0.0.0.0-3.0.1.0" newVersion="3.0.1.0" />
23+
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
2424
</dependentAssembly>
2525
<dependentAssembly>
2626
<assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
@@ -50,6 +50,10 @@
5050
<assemblyIdentity name="Microsoft.Owin.Security.Authorization" publicKeyToken="ba8e29017989cc66" culture="neutral" />
5151
<bindingRedirect oldVersion="0.0.0.0-1.1.0.1" newVersion="1.1.0.1" />
5252
</dependentAssembly>
53+
<dependentAssembly>
54+
<assemblyIdentity name="Autofac.Integration.Owin" publicKeyToken="17863af14b0044da" culture="neutral" />
55+
<bindingRedirect oldVersion="0.0.0.0-4.2.0.0" newVersion="4.2.0.0" />
56+
</dependentAssembly>
5357
</assemblyBinding>
5458
</runtime>
5559
<system.codedom>

0 commit comments

Comments
 (0)