Skip to content

Conversation

@vseanreesermsft
Copy link
Contributor

No description provided.

dotnet-bot and others added 26 commits November 2, 2021 21:57
…Path should be surrounded by quotes in case path contains spaces to avoid possible escalation of privileges

MSRC: 68089 - EoP - aspNetCore processPath should be surrounded by quotes in case path contains spaces to avoid possible escalation of privileges CRM:0331001776

Fixes an issue with a path not being properly escaped so spaces can result in executing an app in the parent directory. The fix just adds double quotes around the argument.

Regression:
No

Risk:
Low

Verification
Manual

Packaging changes reviewed?
TBD - this change is in the ANCM dll
…Check Bypasses Revocation Check with Cache

MSRC 68121 - SFB - ASP.NET Core Client Certificate Validation Check Bypasses Revocation Check with Cache CRM:0331001790

Fixes an issue with certificate validation results being stored indefinitely due to sliding expiration keeping it alive.  The fix just adds an absolute expiration of 30 minutes.

Customer Impact:
This issue prevents certificate revocation if the certificate is in use as the certificate would never be rechecked for revocation due to sliding keeping the result in the cache.

Regression:
No

Risk:
Low

Verification
Unit test

Packaging changes reviewed?
TBD: need patchconfig edits?
…otnet-runtime build 20211103.9

System.Drawing.Common , Microsoft.NETCore.App.Internal , Microsoft.NETCore.App.Runtime.win-x64 , Microsoft.NETCore.BrowserDebugHost.Transport
 From Version 5.0.3 -> To Version 5.0.3
…otnet-runtime build 20211104.3

Microsoft.NETCore.App.Internal , Microsoft.NETCore.App.Runtime.win-x64 , Microsoft.NETCore.BrowserDebugHost.Transport
 From Version 5.0.12-servicing.21522.7 -> To Version 5.0.13-servicing.21554.3
…otnet-runtime build 20211108.4

Microsoft.NETCore.App.Internal , Microsoft.NETCore.App.Runtime.win-x64 , Microsoft.NETCore.BrowserDebugHost.Transport
 From Version 5.0.12-servicing.21522.7 -> To Version 5.0.13-servicing.21558.4
…otnet-runtime build 20211111.7

Microsoft.NETCore.App.Internal , Microsoft.NETCore.App.Runtime.win-x64 , Microsoft.NETCore.BrowserDebugHost.Transport
 From Version 5.0.12-servicing.21522.7 -> To Version 5.0.13-servicing.21561.7
…otnet-runtime build 20211115.9

Microsoft.NETCore.App.Internal , Microsoft.NETCore.App.Runtime.win-x64 , Microsoft.NETCore.BrowserDebugHost.Transport
 From Version 5.0.12-servicing.21522.7 -> To Version 5.0.13-servicing.21565.9
…otnet-runtime build 20211115.16

Microsoft.NETCore.App.Internal , Microsoft.NETCore.App.Runtime.win-x64 , Microsoft.NETCore.BrowserDebugHost.Transport
 From Version 5.0.12-servicing.21522.7 -> To Version 5.0.13-servicing.21565.16
…c-internal/release/5.0-95163c35-8f9d-414b-8bc0-1ad92bbfb6a1
…ng/internal/dotnet-runtime

This pull request updates the following dependencies

[marker]: <> (Begin:d7d10d70-26ab-4663-2902-08d89c6af29b)
## From https://dev.azure.com/dnceng/internal/_git/dotnet-runtime
- **Subscription**: d7d10d70-26ab-4663-2902-08d89c6af29b
- **Build**: 20211115.16
- **Date Produced**: November 16, 2021 6:07:24 AM UTC
- **Commit**: b3afe992253738208ccaaa058e726553889928de
- **Branch**: refs/heads/internal/release/5.0

[DependencyUpdate]: <> (Begin)

- **Updates**:
  - **Microsoft.NETCore.App.Internal**: [from 5.0.12-servicing.21522.7 to 5.0.13-servicing.21565.16][1]
  - **Microsoft.NETCore.App.Runtime.win-x64**: [from 5.0.12 to 5.0.13][1]
  - **Microsoft.NETCore.BrowserDebugHost.Transport**: [from 5.0.12-servicing.21522.7 to 5.0.13-servicing.21565.16][1]

[1]: https://dev.azure.com/dnceng/internal/_git/dotnet-runtime/branches?baseVersion=GC7211aa0&targetVersion=GCb3afe99&_a=files

[DependencyUpdate]: <> (End)

[marker]: <> (End:d7d10d70-26ab-4663-2902-08d89c6af29b)
@vseanreesermsft vseanreesermsft requested review from a team and Tratcher as code owners December 14, 2021 17:55
@ghost ghost added this to the 5.0.x milestone Dec 14, 2021
@ghost
Copy link

ghost commented Dec 14, 2021

Hi @vseanreesermsft. If this is not a tell-mode PR, please make sure to follow the instructions laid out in the servicing process document.
Otherwise, please add tell-mode label.

@dougbu dougbu added area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework tell-mode Indicates a PR which is being merged during tell-mode labels Dec 14, 2021
@dougbu dougbu enabled auto-merge December 15, 2021 03:44
@dougbu dougbu merged commit 882d438 into dotnet:release/5.0 Dec 15, 2021
@dougbu dougbu modified the milestones: 5.0.x, 5.0.14 Dec 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework tell-mode Indicates a PR which is being merged during tell-mode

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants