Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[vs17.2] Update sdk version to bump pulled runtime #8730

Merged
merged 3 commits into from
May 5, 2023

Conversation

JanKrivanek
Copy link
Member

@JanKrivanek JanKrivanek commented May 4, 2023

Fixes - bunch of CVEs (up to 29): https://devdiv.visualstudio.com/DevDiv/_componentGovernance/DotNet-msbuild-Trusted?_a=alerts&typeId=15231688&alerts-view-option=active

Context

We need to update runtime from 6.0.2 to at least 6.0.12 (this is taking it to 6.0.16 - as part of SDK 6.0.311)

@ghost
Copy link

ghost commented May 4, 2023

Hello! I noticed that you're targeting one of our servicing branches. Please consider updating the version.

global.json Outdated Show resolved Hide resolved
Co-authored-by: Rainer Sigwald <raines@microsoft.com>
@JanKrivanek JanKrivanek added the merge-when-branch-open PRs that are approved, except that there is a problem that means we are not merging stuff right now. label May 5, 2023
@Forgind Forgind merged commit b9a3f3c into vs17.2 May 5, 2023
@Forgind Forgind deleted the JanKrivanek-patch-2 branch May 5, 2023 18:28
@Forgind
Copy link
Member

Forgind commented May 5, 2023

Fixes - bunch of CVEs (up to 29): https://devdiv.visualstudio.com/DevDiv/_componentGovernance/DotNet-msbuild-Trusted?_a=alerts&typeId=15231688&alerts-view-option=active

Context

We need to update runtime from 6.0.2 to at least 6.0.12 (this is taking it to 6.0.16 - as part of SDK 6.0.408)

I corrected the version number for the commit and this comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
merge-when-branch-open PRs that are approved, except that there is a problem that means we are not merging stuff right now.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants