Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When are you going to release a version that includes Duende version 7.0.6 or higher? #236

Closed
gtjsantos opened this issue Sep 27, 2024 · 3 comments
Assignees
Labels
question Further information is requested

Comments

@gtjsantos
Copy link

Duende Software announced in mid-July that they had found a security vulnerability. The full security advisory will be published on July 31st as CVE-2024-39694.

This vulnerability is fixed in the following versions of Duende.IdentityServer:
7.0.6
6.3.10
6.2.5
6.1.8
6.0.5

Our question is when are you going to release a version that includes Duende version 7.0.6 or higher?

@gtjsantos gtjsantos added the question Further information is requested label Sep 27, 2024
@gtjsantos gtjsantos changed the title When you release a new version with Duende Identity Server 7.0.6 os higher? When are you going to release a version that includes Duende version 7.0.6 or higher? Sep 27, 2024
@skoruba
Copy link
Owner

skoruba commented Sep 27, 2024

I will release soon. thanks! In release 2.4.0.

@gtjsantos
Copy link
Author

Thanks!

@skoruba skoruba mentioned this issue Sep 28, 2024
6 tasks
@skoruba
Copy link
Owner

skoruba commented Sep 29, 2024

Released in 2.4.0.
Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants