[grpc-io] c-ares and CVE-2022-4904 in gRPC C# v1.46.x

2023-11-27 Thread John Wilson
Hi gRPC Team! I see the C# version in maintenance mode (v1.46.x) uses version 1.17.2, which is impacted by CVE-2022-4904 (fixed in version 1.19). Are there plans to upgrade the version included in gRPC? Or is it not impacted by the c-ares vulnerability? - sebas -- You received this message

[grpc-io] c-ares and CVE-2022-4904 in gRPC C# v1.46.x

2023-11-27 Thread John Wilson
Hi gRPC Team! I see the C# version in maintenance mode (v1.46.x) uses version 1.17.2, which is impacted by CVE-2022-4904 (fixed in version 1.19). Are there plans to upgrade the version included in gRPC? Or is it not impacted by the c-ares vulnerability? - sebas -- You received this message

[grpc-io] c-ares and CVE-2022-4904 in gRPC C# v1.46.x

2023-11-22 Thread Sebas Mendez
Hi gRPC Team! I see the C# version in maintenance mode (v1.46.x) uses version 1.17.2, which is impacted by CVE-2022-4904 (fixed in version 1.19). Are there plans to upgrade the version included in gRPC? Or is it not impacted by the c-ares vulnerability? - sebas -- You received this message