Martin Tzvetanov Grigorov created AVRO-4196:
-----------------------------------------------
Summary: [c#] Package 'Microsoft.Build.Utilities.Core' 17.8.3 has
a known high severity vulnerability,
Key: AVRO-4196
URL: https://issues.apache.org/jira/browse/AVRO-4196
Project: Apache Avro
Issue Type: Bug
Components: csharp
Reporter: Martin Tzvetanov Grigorov
The Docker build for the main branch fails with:
{code:java}
Determining projects to restore...
/avro/lang/csharp/src/apache/msbuild/Avro.msbuild.csproj : error NU1903:
Warning As Error: Package 'Microsoft.Build.Utilities.Core' 17.8.3 has a known
high severity vulnerability, https://github.com/advisories/GHSA-w3q9-fxm7-j8fq
[/avro/lang/csharp/Avro.sln]
Restored /avro/lang/csharp/src/apache/codegen/Avro.codegen.csproj (in 1.34
sec).
Failed to restore /avro/lang/csharp/src/apache/msbuild/Avro.msbuild.csproj
(in 1.34 sec).
Restored /avro/lang/csharp/src/apache/main/Avro.main.csproj (in 1.34 sec).
Restored
/avro/lang/csharp/src/apache/codec/Avro.File.Zstandard/Avro.File.Zstandard.csproj
(in 1.34 sec).
Restored
/avro/lang/csharp/src/apache/codec/Avro.File.Snappy/Avro.File.Snappy.csproj (in
211 ms).
Restored /avro/lang/csharp/src/apache/codec/Avro.File.XZ/Avro.File.XZ.csproj
(in 264 ms).
Restored
/avro/lang/csharp/src/apache/codec/Avro.File.Zstandard.Test/Avro.File.Zstandard.Test.csproj
(in 1.11 sec).
Restored
/avro/lang/csharp/src/apache/codec/Avro.File.Snappy.Test/Avro.File.Snappy.Test.csproj
(in 886 ms).
Restored
/avro/lang/csharp/src/apache/codec/Avro.File.XZ.Test/Avro.File.XZ.Test.csproj
(in 1.11 sec).
Restored /avro/lang/csharp/src/apache/perf/Avro.perf.csproj (in 10 ms).
Restored
/avro/lang/csharp/src/apache/codec/Avro.File.BZip2.Test/Avro.File.BZip2.Test.csproj
(in 542 ms).
Restored
/avro/lang/csharp/src/apache/codec/Avro.File.BZip2/Avro.File.BZip2.csproj (in
557 ms).
Restored /avro/lang/csharp/src/apache/test/Avro.test.csproj (in 1.76 sec).
Restored /avro/lang/csharp/src/apache/benchmark/Avro.benchmark.csproj (in
1.63 sec). {code}
https://github.com/apache/avro/actions/runs/19063171896/job/54447396833
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
