<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 21:42:40 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[CSHARP-2478] Update dependency System.Net.Security to 4.3.2</title>
                <link>https://jira.mongodb.org/browse/CSHARP-2478</link>
                <project id="10041" key="CSHARP">C# Driver</project>
                    <description>&lt;p&gt;Update dependency on &lt;a href=&quot;https://www.nuget.org/packages/System.Net.Security/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;System.Net.Security&lt;/a&gt;&#160;from 4.0.0&#160;&#160;to 4.3.2&lt;br/&gt;
The reason is&#160; &lt;a href=&quot;https://www.nuget.org/packages/System.Net.Security/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;System.Net.Security&lt;/a&gt;:4.0.0 is &lt;a href=&quot;https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETSECURITY-60072&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;vulnerable to Authentication Bypass attacks.&#160;&lt;/a&gt;&#160;&lt;/p&gt;

&lt;p&gt;Looks like it&apos;s not break backward compatibility.&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;</description>
                <environment></environment>
        <key id="670234">CSHARP-2478</key>
            <summary>Update dependency System.Net.Security to 4.3.2</summary>
                <type id="4" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14710&amp;avatarType=issuetype">Improvement</type>
                                            <priority id="4" iconUrl="https://jira.mongodb.org/images/icons/priorities/minor.svg">Minor - P4</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="vincent.kam@mongodb.com">Vincent Kam</assignee>
                                    <reporter username="flaksirus">Ruslan Khasanbaev</reporter>
                        <labels>
                    </labels>
                <created>Fri, 11 Jan 2019 15:19:58 +0000</created>
                <updated>Sat, 28 Oct 2023 11:48:51 +0000</updated>
                            <resolved>Thu, 7 Feb 2019 15:00:38 +0000</resolved>
                                                    <fixVersion>2.8.0</fixVersion>
                                    <component>Build</component>
                                        <votes>22</votes>
                                    <watches>5</watches>
                                                                                                                <comments>
                            <comment id="2140985" author="xgen-internal-githook" created="Thu, 7 Feb 2019 14:55:56 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Ruslan Khasanbaev&apos;, &apos;email&apos;: &apos;flaksirus@gmail.com&apos;, &apos;username&apos;: &apos;flaksirus&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CSHARP-2478&quot; title=&quot;Update dependency System.Net.Security to 4.3.2&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CSHARP-2478&quot;&gt;&lt;del&gt;CSHARP-2478&lt;/del&gt;&lt;/a&gt;: Update dependency &quot;System.Net.Security&quot; to version 4.3.2&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-csharp-driver/commit/73f78af6a2fe11aab2c988e4d87ae0e9b0c1a071&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-csharp-driver/commit/73f78af6a2fe11aab2c988e4d87ae0e9b0c1a071&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="2113803" author="denis.babarykin" created="Mon, 14 Jan 2019 12:40:16 +0000"  >&lt;p&gt;I am interested in solving this issue too. It will be very good if you solve this problem very soon.&lt;img class=&quot;emoticon&quot; src=&quot;https://jira.mongodb.org/images/icons/emoticons/biggrin.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&lt;img class=&quot;emoticon&quot; src=&quot;https://jira.mongodb.org/images/icons/emoticons/thumbs_up.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&lt;/p&gt;</comment>
                            <comment id="2112344" author="flaksirus" created="Fri, 11 Jan 2019 16:01:22 +0000"  >&lt;p&gt;There is more vulnerabilities associated with this package:&lt;br/&gt;
&lt;a href=&quot;https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETSECURITY-60069&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;Denial of Service (DoS)&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETSECURITY-60070&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;Improper Certificate Validation&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETSECURITY-60071&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;Privilege Escalation&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="2112342" author="bekas" created="Fri, 11 Jan 2019 16:00:51 +0000"  >&lt;p&gt;It is a very important issue for me! Thank`s, Ruslan!&lt;/p&gt;</comment>
                            <comment id="2112303" author="flaksirus" created="Fri, 11 Jan 2019 15:41:02 +0000"  >&lt;p&gt;I&apos;ve created &lt;a href=&quot;https://github.com/mongodb/mongo-csharp-driver/pull/364&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;pull request&lt;/a&gt;&#160;for this issue.&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                        <customfield id="customfield_10011" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Backwards Compatibility</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10038"><![CDATA[Fully Compatible]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|htfhpb:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>