[
https://issues.apache.org/jira/browse/AVRO-4196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18038652#comment-18038652
]
ASF subversion and git services commented on AVRO-4196:
-------------------------------------------------------
Commit 022aec1f07569bbfce57d403dba955c90e353667 in avro's branch
refs/heads/main from Ryan Skraba
[ https://gitbox.apache.org/repos/asf?p=avro.git;h=022aec1f07 ]
AVRO-4196: Bump C# build utilities (#3549)
> [c#] Package 'Microsoft.Build.Utilities.Core' 17.8.3 has a known high
> severity vulnerability,
> ---------------------------------------------------------------------------------------------
>
> Key: AVRO-4196
> URL: https://issues.apache.org/jira/browse/AVRO-4196
> Project: Apache Avro
> Issue Type: Bug
> Components: csharp
> Reporter: Martin Tzvetanov Grigorov
> Assignee: Ryan Skraba
> Priority: Major
> Labels: pull-request-available
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The Docker build for the main branch fails with:
> {code:java}
> Determining projects to restore...
> /avro/lang/csharp/src/apache/msbuild/Avro.msbuild.csproj : error NU1903:
> Warning As Error: Package 'Microsoft.Build.Utilities.Core' 17.8.3 has a known
> high severity vulnerability,
> https://github.com/advisories/GHSA-w3q9-fxm7-j8fq [/avro/lang/csharp/Avro.sln]
> Restored /avro/lang/csharp/src/apache/codegen/Avro.codegen.csproj (in 1.34
> sec).
> Failed to restore /avro/lang/csharp/src/apache/msbuild/Avro.msbuild.csproj
> (in 1.34 sec).
> Restored /avro/lang/csharp/src/apache/main/Avro.main.csproj (in 1.34 sec).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.Zstandard/Avro.File.Zstandard.csproj
> (in 1.34 sec).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.Snappy/Avro.File.Snappy.csproj
> (in 211 ms).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.XZ/Avro.File.XZ.csproj (in 264
> ms).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.Zstandard.Test/Avro.File.Zstandard.Test.csproj
> (in 1.11 sec).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.Snappy.Test/Avro.File.Snappy.Test.csproj
> (in 886 ms).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.XZ.Test/Avro.File.XZ.Test.csproj
> (in 1.11 sec).
> Restored /avro/lang/csharp/src/apache/perf/Avro.perf.csproj (in 10 ms).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.BZip2.Test/Avro.File.BZip2.Test.csproj
> (in 542 ms).
> Restored
> /avro/lang/csharp/src/apache/codec/Avro.File.BZip2/Avro.File.BZip2.csproj (in
> 557 ms).
> Restored /avro/lang/csharp/src/apache/test/Avro.test.csproj (in 1.76 sec).
> Restored /avro/lang/csharp/src/apache/benchmark/Avro.benchmark.csproj (in
> 1.63 sec). {code}
>
> https://github.com/apache/avro/actions/runs/19063171896/job/54447396833
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
