Subject: | Security Updates, Third Party Vulnerability assessment and updates. Azure Security Compliance. |
Summary: | The following updates will be included in this release: - Third Party Vulnerability assessment and updates
- Azure Security Compliance.
- Security patch for all Extensions
- Security patch for all NuGet Packages
|
Audit Notes: | Edited by sanjay on 24/01/24 16:22. Edited by sanjay on 19/01/24 16:56. |
19 Jan 2024 | 04:55PM Comment 1 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 25-01-2024 04:54 PM Time Taken: 3.00 |
| Updated DevExpress components to 23.2.3 - Refer to Security Advisory published 10th January 2024. |
|
24 Jan 2024 | 10:38AM Comment 2 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 01-02-2024 10:35 AM Time Taken: 46.00 |
| Updated all Third-Party components to security updates available as of 24th January 2024 8AM AEST. below is the list of packages updated:
- Package ID="AjaxControlToolkit" version="20.1.0" targetFramework="net46"
- Package ID="Common.Logging" version="3.4.1" targetFramework="net46"
- Package ID="Common.Logging.Core" version="3.4.1" targetFramework="net46"
- Package ID="CrystalDecisions.CrystalReports.Engine" version="1.0.0" targetFramework="net46"
- Package ID="GoogleAuthenticator" version="3.2.0" targetFramework="net48"
- Package ID="Microsoft.AspNet.Razor" version="3.3.0" targetFramework="net48"
- Package ID="Microsoft.AspNet.WebApi" version="5.3.0" targetFramework="net48"
- Package ID="Microsoft.AspNet.WebApi.Client" version="6.0.0" targetFramework="net48"
- Package ID="Microsoft.AspNet.WebApi.Core" version="5.3.0" targetFramework="net48"
- Package ID="Microsoft.AspNet.WebApi.WebHost" version="5.3.0" targetFramework="net48"
- Package ID="Microsoft.AspNet.WebPages" version="3.3.0" targetFramework="net48"
- Package ID="Microsoft.Bcl" version="1.1.10" targetFramework="net46"
- Package ID="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net46"
- Package ID="Microsoft.CSharp" version="4.7.0" targetFramework="net46"
- Package ID="Microsoft.Net.Http" version="2.2.29" targetFramework="net46"
- Package ID="Microsoft.NETCore.Platforms" version="7.0.4" targetFramework="net48"
- Package ID="Microsoft.Web.Administration" version="11.1.0" targetFramework="net48"
- Package ID="Microsoft.Web.Infrastructure" version="2.0.0" targetFramework="net48"
- Package ID="Microsoft.Win32.Primitives" version="4.3.0" targetFramework="net48"
- Package ID="Microsoft.Win32.Registry" version="5.0.0" targetFramework="net48"
- Package ID="NETStandard.Library" version="2.0.3" targetFramework="net48"
- Package ID="Newtonsoft.Json" version="13.0.3" targetFramework="net48"
- Package ID="Newtonsoft.Json.Bson" version="1.0.2" targetFramework="net48"
- Package ID="QRCoder" version="1.4.3" targetFramework="net48"
- Package ID="System.AppContext" version="4.3.0" targetFramework="net48"
- Package ID="System.Buffers" version="4.5.1" targetFramework="net48"
- Package ID="System.Collections" version="4.3.0" targetFramework="net48"
- Package ID="System.Collections.Concurrent" version="4.3.0" targetFramework="net48"
- Package ID="System.Console" version="4.3.1" targetFramework="net48"
- Package ID="System.Diagnostics.Debug" version="4.3.0" targetFramework="net48"
- Package ID="System.Diagnostics.DiagnosticSource" version="8.0.0" targetFramework="net48"
- Package ID="System.Diagnostics.EventLog" version="8.0.0" targetFramework="net48"
- Package ID="System.Diagnostics.Tools" version="4.3.0" targetFramework="net48"
- Package ID="System.Diagnostics.TraceSource" version="4.3.0" targetFramework="net48"
- Package ID="System.Diagnostics.Tracing" version="4.3.0" targetFramework="net48"
- Package ID="System.Globalization" version="4.3.0" targetFramework="net48"
- Package ID="System.Globalization.Calendars" version="4.3.0" targetFramework="net48"
- Package ID="System.IO" version="4.3.0" targetFramework="net48"
- Package ID="System.IO.Compression" version="4.3.0" targetFramework="net48"
- Package ID="System.IO.Compression.ZipFile" version="4.3.0" targetFramework="net48"
- Package ID="System.IO.FileSystem" version="4.3.0" targetFramework="net48"
- Package ID="System.IO.FileSystem.Primitives" version="4.3.0" targetFramework="net48"
- Package ID="System.Linq" version="4.3.0" targetFramework="net48"
- Package ID="System.Linq.Expressions" version="4.3.0" targetFramework="net48"
- Package ID="System.Memory" version="4.5.5" targetFramework="net48"
- Package ID="System.Net.Http" version="4.3.4" targetFramework="net48"
- Package ID="System.Net.Primitives" version="4.3.1" targetFramework="net48"
- Package ID="System.Net.Sockets" version="4.3.0" targetFramework="net48"
- Package ID="System.Numerics.Vectors" version="4.5.0" targetFramework="net48"
- Package ID="System.ObjectModel" version="4.3.0" targetFramework="net48"
- Package ID="System.Reflection" version="4.3.0" targetFramework="net48"
- Package ID="System.Reflection.Extensions" version="4.3.0" targetFramework="net48"
- Package ID="System.Reflection.Primitives" version="4.3.0" targetFramework="net48"
- Package ID="System.Reflection.TypeExtensions" version="4.7.0" targetFramework="net48"
- Package ID="System.Resources.ResourceManager" version="4.3.0" targetFramework="net48"
- Package ID="System.Runtime" version="4.3.1" targetFramework="net48"
- Package ID="System.Runtime.CompilerServices.Unsafe" version="6.0.0" targetFramework="net48"
- Package ID="System.Runtime.Extensions" version="4.3.1" targetFramework="net48"
- Package ID="System.Runtime.Handles" version="4.3.0" targetFramework="net48"
- Package ID="System.Runtime.InteropServices" version="4.3.0" targetFramework="net48"
- Package ID="System.Runtime.InteropServices.RuntimeInformation" version="4.3.0" targetFramework="net48"
- Package ID="System.Runtime.Numerics" version="4.3.0" targetFramework="net48"
- Package ID="System.Security.AccessControl" version="6.0.0" targetFramework="net48"
- Package ID="System.Security.Claims" version="4.3.0" targetFramework="net48"
- Package ID="System.Security.Cryptography.Algorithms" version="4.3.1" targetFramework="net48"
- Package ID="System.Security.Cryptography.Encoding" version="4.3.0" targetFramework="net48"
- Package ID="System.Security.Cryptography.Primitives" version="4.3.0" targetFramework="net48"
- Package ID="System.Security.Cryptography.X509Certificates" version="4.3.2" targetFramework="net48"
- Package ID="System.Security.Principal.Windows" version="5.0.0" targetFramework="net48"
- Package ID="System.ServiceProcess.ServiceController" version="8.0.0" targetFramework="net48"
- Package ID="System.Text.Encoding" version="4.3.0" targetFramework="net48"
- Package ID="System.Text.Encoding.Extensions" version="4.3.0" targetFramework="net48"
- Package ID="System.Text.RegularExpressions" version="4.3.1" targetFramework="net48"
- Package ID="System.Threading" version="4.3.0" targetFramework="net48"
- Package ID="System.Threading.Tasks" version="4.3.0" targetFramework="net48"
- Package ID="System.Threading.Tasks.Extensions" version="4.5.4" targetFramework="net48"
- Package ID="System.Threading.Timer" version="4.3.0" targetFramework="net48"
- Package ID="System.Xml.ReaderWriter" version="4.3.1" targetFramework="net48"
- Package ID="System.Xml.XDocument" version="4.3.0" targetFramework="net48"
|
|
24 Jan 2024 | 04:20PM Comment 3 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 01-02-2024 03:18 PM Time Taken: 11.00 |
| Completed the following Tests: - File Export
- Email functions
- Report Data
- Email Import
|
|
08 Feb 2024 | 12:03PM Comment 4 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 15-02-2024 12:02 PM Time Taken: 6.00 Notes: ETC extended from: 19/01/2024 to 15/02/2024 |
| Completed build 15.20.240207. Installed on LinkAD in prep for further testing. |
|
21 Feb 2024 | 10:36AM Comment 5 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 29-02-2024 10:35 AM |
|
System Tests completed. |
|