Skip to content

Commit 70898a0

Browse files
authored
Bump System.Security.Cryptography.Xml version to address CVE-2023-29331 (#55304)
1 parent 171644c commit 70898a0

File tree

2 files changed

+2
-3
lines changed

2 files changed

+2
-3
lines changed

eng/Versions.props

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -198,8 +198,7 @@
198198
<MicrosoftExtensionsDiagnosticAdapterVersion>5.0.0-preview.3.20215.2</MicrosoftExtensionsDiagnosticAdapterVersion>
199199
<!-- Build tool dependencies -->
200200
<MicrosoftVSSDKBuildToolsVersion>15.9.3032</MicrosoftVSSDKBuildToolsVersion>
201-
<!-- Manually updated version from 6.0.0 to address CVE-2021-43877 -->
202-
<RepoTasksSystemSecurityCryptographyXmlVersion>6.0.1</RepoTasksSystemSecurityCryptographyXmlVersion>
201+
<RepoTasksSystemSecurityCryptographyXmlVersion>8.0.0</RepoTasksSystemSecurityCryptographyXmlVersion>
203202
<!-- Stable dotnet/corefx packages no longer updated for .NET Core 3 -->
204203
<MicrosoftCSharpVersion>4.7.0</MicrosoftCSharpVersion>
205204
<MicrosoftWin32RegistryVersion>5.0.0</MicrosoftWin32RegistryVersion>

eng/tools/RepoTasks/RepoTasks.csproj

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@
2626
<PackageReference Include="Microsoft.Build.Framework" Version="$(MicrosoftBuildFrameworkVersion)" />
2727
<PackageReference Include="Microsoft.Build.Tasks.Core" Version="$(MicrosoftBuildTasksCoreVersion)" />
2828
<PackageReference Include="Microsoft.Build.Utilities.Core" Version="$(MicrosoftBuildUtilitiesCoreVersion)" />
29-
<!-- Manually updated version from 6.0.0 to address CVE-2021-43877 -->
29+
<!-- Manually updated version from 6.0.0 to address CVE-2023-29331 -->
3030
<PackageReference Include="System.Security.Cryptography.Xml" Version="$(RepoTasksSystemSecurityCryptographyXmlVersion)" />
3131
</ItemGroup>
3232

0 commit comments

Comments
 (0)