From 908125fb900e4de3207f95f8d53d12ace4fad12c Mon Sep 17 00:00:00 2001 From: Rahul Bhandari Date: Tue, 9 Jul 2024 11:18:08 -0700 Subject: [PATCH 1/2] Update cve.md --- release-notes/6.0/cve.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/release-notes/6.0/cve.md b/release-notes/6.0/cve.md index 64030f63048..6410f7d17e0 100644 --- a/release-notes/6.0/cve.md +++ b/release-notes/6.0/cve.md @@ -9,8 +9,8 @@ Your app needs to be on the latest .NET 6 patch version to be secure. The longer Your app may be vulnerable to the following published security [CVEs](https://www.cve.org/) if you are using an older .NET 6 patch version. - 6.0.32 (July 2024) - - [CVE-2024-38095 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/xxx) - - [CVE-2024-38081 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/xxx) + - [CVE-2024-38095 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/312) + - [CVE-2024-38081 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/313) - 6.0.31 (May 28 2024) - No new CVEs. - 6.0.30 (May 2024) From 0016fb3c3edacfa4ea690abb384c2f6e0b5e0172 Mon Sep 17 00:00:00 2001 From: Rahul Bhandari Date: Tue, 9 Jul 2024 11:18:44 -0700 Subject: [PATCH 2/2] Update cve.md --- release-notes/8.0/cve.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/release-notes/8.0/cve.md b/release-notes/8.0/cve.md index c6a6ed55c73..144b5fdbd0e 100644 --- a/release-notes/8.0/cve.md +++ b/release-notes/8.0/cve.md @@ -9,9 +9,9 @@ Your app needs to be on the latest .NET 8 patch version to be secure. The longer Your app may be vulnerable to the following published security [CVEs](https://www.cve.org/) if you are using the given version or older. - 8.0.7 (July 2024) - - [CVE-2024-38095 | .NET Remote code Execution Vulnerability](https://github.com/dotnet/announcements/issues/xxx) - - [CVE-2024-35264 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/xxx) - - [CVE-2024-30105 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/xxx) + - [CVE-2024-38095 | .NET Remote code Execution Vulnerability](https://github.com/dotnet/announcements/issues/312) + - [CVE-2024-35264 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/314) + - [CVE-2024-30105 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/315) - 8.0.6 (May 28 2024) - No new CVEs. - 8.0.5 (May 2024)