Fix Vulnerability (#1100)

dotnet · Jun 4, 2021 · e9f2734 · e9f2734
1 parent 6ba4694
commit e9f2734
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/...ureKeyVaultProvider/Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.csproj b/...ureKeyVaultProvider/Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.csproj
@@ -24,6 +24,7 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.SourceLink.GitHub" Version="$(MicrosoftSourceLinkGitHubVersion)" PrivateAssets="All" />
     <PackageReference Include="Azure.Core" Version="$(AzureCoreVersion)" />
+    <PackageReference Include="System.Text.Encodings.Web" Version="$(SystemTextEncodingsWebVersion)" />
     <PackageReference Include="Azure.Security.KeyVault.Keys" Version="$(AzureSecurityKeyVaultKeysVersion)" />
     <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="$(MicrosoftExtensionsCachingMemoryVersion)" />
   </ItemGroup>

diff --git a/tools/specs/Microsoft.Data.SqlClient.nuspec b/tools/specs/Microsoft.Data.SqlClient.nuspec
@@ -30,6 +30,7 @@ When using NuGet 3.x this package requires at least version 3.4.</description>
       <group targetFramework="net461">
         <dependency id="Microsoft.Data.SqlClient.SNI" version="3.0.0-preview1.21104.2" />
         <dependency id="Azure.Identity" version="1.3.0" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Microsoft.Identity.Client" version="4.22.0" />
         <dependency id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="6.8.0" />
         <dependency id="Microsoft.IdentityModel.JsonWebTokens" version="6.8.0" />
@@ -44,6 +45,7 @@ When using NuGet 3.x this package requires at least version 3.4.</description>
         <dependency id="System.Configuration.ConfigurationManager" version="4.7.0" exclude="Compile" />
         <dependency id="System.Runtime.Caching" version="4.7.0" exclude="Compile" />
         <dependency id="Azure.Identity" version="1.3.0" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Microsoft.Identity.Client" version="4.22.0" exclude="Compile"/>
         <dependency id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="6.8.0" />
         <dependency id="Microsoft.IdentityModel.JsonWebTokens" version="6.8.0" />
@@ -57,6 +59,7 @@ When using NuGet 3.x this package requires at least version 3.4.</description>
         <dependency id="System.Configuration.ConfigurationManager" version="4.7.0" exclude="Compile" />
         <dependency id="System.Runtime.Caching" version="4.7.0" exclude="Compile" />
         <dependency id="Azure.Identity" version="1.3.0" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Microsoft.Identity.Client" version="4.22.0" exclude="Compile"/>
         <dependency id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="6.8.0" />
         <dependency id="Microsoft.IdentityModel.JsonWebTokens" version="6.8.0" />
@@ -70,6 +73,7 @@ When using NuGet 3.x this package requires at least version 3.4.</description>
         <dependency id="System.Text.Encoding.CodePages" version="4.7.0" exclude="Compile" />
         <dependency id="System.Runtime.Caching" version="4.7.0" exclude="Compile" />
         <dependency id="Azure.Identity" version="1.3.0" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Microsoft.Identity.Client" version="4.22.0" exclude="Compile"/>
         <dependency id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="6.8.0" />
         <dependency id="Microsoft.IdentityModel.JsonWebTokens" version="6.8.0" />
@@ -84,6 +88,7 @@ When using NuGet 3.x this package requires at least version 3.4.</description>
         <dependency id="System.Text.Encoding.CodePages" version="4.7.0" exclude="Compile" />
         <dependency id="System.Runtime.Caching" version="4.7.0" exclude="Compile" />
         <dependency id="Azure.Identity" version="1.3.0" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Microsoft.Identity.Client" version="4.22.0" exclude="Compile"/>
         <dependency id="Microsoft.IdentityModel.Protocols.OpenIdConnect" version="6.8.0" />
         <dependency id="Microsoft.IdentityModel.JsonWebTokens" version="6.8.0" />

diff --git a/tools/specs/add-ons/Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.nuspec b/tools/specs/add-ons/Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyVaultProvider.nuspec
@@ -27,18 +27,21 @@ Microsoft.Data.SqlClient.AlwaysEncrypted.AzureKeyStoreProvider.SqlColumnEncrypti
       <group targetFramework="net461">
         <dependency id="Microsoft.Data.SqlClient" version="1.1.3" />
         <dependency id="Azure.Core" version="[1.6.0,2.0.0)" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Azure.Security.KeyVault.Keys" version="[4.0.3,5.0.0)" />
         <dependency id="Microsoft.Extensions.Caching.Memory" version="5.0.0" />
       </group>
       <group targetFramework="netcoreapp2.1">
         <dependency id="Microsoft.Data.SqlClient" version="1.1.3" />
         <dependency id="Azure.Core" version="[1.6.0,2.0.0)" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Azure.Security.KeyVault.Keys" version="[4.0.3,5.0.0)" />
         <dependency id="Microsoft.Extensions.Caching.Memory" version="5.0.0" />
       </group>
       <group targetFramework="netstandard2.0">
         <dependency id="Microsoft.Data.SqlClient" version="2.1.0" />
         <dependency id="Azure.Core" version="[1.6.0,2.0.0)" />
+        <dependency id="System.Text.Encodings.Web" version="4.7.2" />
         <dependency id="Azure.Security.KeyVault.Keys" version="[4.0.3,5.0.0)" />
         <dependency id="Microsoft.Extensions.Caching.Memory" version="5.0.0" />
       </group>