CVE-2024-38801 is reported by 8.0.7 but does not appear to be listed in the 8.0.7 release notes
Open
area-release-notes
- Dominant language
- PowerShell
- Stars
- 22k
- Forks
- 4.9k
- Avg merge
- 5d 5h
- Merged PRs (30d)
- 29
Description
### URL(s)
https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.7/8.0.7.md?WT.mc_id=dotnet-35129-website
### Description
According to the CVE page at [https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-38081](https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-38081), CVE-2024-38081 is reported to be remediated by the 8.0.7 release but does not appear in the release notes. Additionally, Defender for Containers is still reporting this issue with an Ubuntu 22.04 container with dotnet 8.0.7 installed.
Contributor guide
Assessment
This issue has not been assessed yet.