Skip to content

Conversation

ahmedmuhsin
Copy link
Contributor

@ahmedmuhsin ahmedmuhsin commented Dec 14, 2024

Current version 32.0.0 is still flagged for CVE-2023-2976 even though the vulnerability was patched in that version. The patch introduced some issues on Windows and the recommendation is to use 32.0.1 or higher where those issues are fixed.

https://nvd.nist.gov/vuln/detail/CVE-2023-2976

Pull request checklist

  • My changes do not require documentation changes
    • Otherwise: Documentation issue linked to PR
  • My changes should not be added to the release notes for the next release
    • Otherwise: I've added my notes to release_notes.md
  • My changes do not need to be backported to a previous version
    • Otherwise: Backport tracked by issue/PR #issue_or_pr
  • I have added all required tests (Unit tests, E2E tests)

Additional information

Additional PR information

@ahmedmuhsin ahmedmuhsin marked this pull request as ready for review December 14, 2024 00:05
@ahmedmuhsin ahmedmuhsin merged commit 8ecc29b into Azure:dev Dec 14, 2024
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants