This is an automated email from the ASF dual-hosted git repository.

nightowl888 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/lucenenet.git

commit 55b27202d136a94cff4c3537cb55abebdb96017b
Author: Shad Storhaug <[email protected]>
AuthorDate: Sat Jan 20 13:35:41 2024 +0700

    .build/dependencies.props: Bumped System.Security.Cryptography package to 
6.0.1 because of security vulnerabilities found in 4.7.0. See: 
https://github.com/advisories/GHSA-2m65-m22p-9wjw
---
 .build/dependencies.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.build/dependencies.props b/.build/dependencies.props
index e1c974c8a..557cc3383 100644
--- a/.build/dependencies.props
+++ b/.build/dependencies.props
@@ -78,7 +78,7 @@
     
<SystemReflectionTypeExtensionsPackageVersion>4.3.0</SystemReflectionTypeExtensionsPackageVersion>
     
<SystemRuntimeCompilerServicesUnsafePackageVersion>5.0.0</SystemRuntimeCompilerServicesUnsafePackageVersion>
     
<SystemRuntimeInteropServicesRuntimeInformationPackageVersion>4.3.0</SystemRuntimeInteropServicesRuntimeInformationPackageVersion>
-    
<SystemSecurityCryptographyXmlPackageVersion>4.7.0</SystemSecurityCryptographyXmlPackageVersion>
+    
<SystemSecurityCryptographyXmlPackageVersion>6.0.1</SystemSecurityCryptographyXmlPackageVersion>
     
<SystemTextEncodingCodePagesPackageVersion>4.3.0</SystemTextEncodingCodePagesPackageVersion>
     <SystemTextEncodingCodePagesPackageVersion Condition=" 
'$(TargetFramework)' == 'net461' 
">5.0.0</SystemTextEncodingCodePagesPackageVersion>
     <TimeZoneConverterPackageVersion>6.1.0</TimeZoneConverterPackageVersion>

Reply via email to