Skip to content

Commit b7f9fbd

Browse files
JanKallmanJanKallman
committed
EPPlus version 7.4.1
1 parent 860a2e0 commit b7f9fbd

File tree

4 files changed

+18
-11
lines changed

4 files changed

+18
-11
lines changed

‎SECURITY.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,5 +26,6 @@ Create an issue in our [issue tracker](https://github.com/EPPlusSoftware/EPPlus/
2626
## Vulnerabilities
2727
|Detected|Resolved|Affected EPPlus versions|CVE|Our comment|Resolution|
2828
|--------|--------| ----------------------|---|----------|----------|
29-
|September 9, 2024||EPPlus 7.x, targeting .NET 7 or 8|[Microsoft Security Advisory CVE-2024-38095](https://github.com/advisories/GHSA-447r-wph3-92pm) and [Microsoft Security Advisory CVE-2024-30105](https://github.com/advisories/GHSA-hh2w-p6rv-4g7w)|Microsoft has released security fixes for System.Text.Json and System.Formats.Asn1 (transient dependencies in EPPlus). The potential risk for most users should be low.|Patch to be released in version 7.3.2|
29+
|October 10, 2024|October 11, 2024|EPPlus 7.x,targeting .NET 7 or 8|[Microsoft Security Advisory CVE-2024-38095](https://github.com/advisories/GHSA-447r-wph3-92pm) and [Microsoft Security Advisory CVE-2024-30105](https://github.com/advisories/GHSA-hh2w-p6rv-4g7w)|Microsoft has released a security fix in Microsoft.Extensions.Configuration.Json 8.0.1. The potential risk for most users should be low.|Patch released in version 7.4.1|
30+
|September 9, 2024||EPPlus 7.x, targeting .NET 7 or 8|[Microsoft Security Advisory CVE-2024-38095](https://github.com/advisories/GHSA-447r-wph3-92pm) and [Microsoft Security Advisory CVE-2024-30105](https://github.com/advisories/GHSA-hh2w-p6rv-4g7w)|Microsoft has released security fixes for System.Text.Json and System.Formats.Asn1 (transient dependencies in EPPlus). The potential risk for most users should be low.|Patch released in version 7.3.2|
3031
|June 15, 2023|June 15, 2023|EPPlus 6.x prior to 6.2.6, targeting .NET 6 or 7.|[.NET Denial of Service vulnerability (CVE 2023-29331)](https://github.com/advisories/GHSA-555c-2p6r-68mm)|Microsoft has released a security fix for a Denial of Service vulnerability (CVE-2023-29331) in System.Security.Cryptography.Pkcs for .NET 6 and .NET 7. EPPlus uses this component for x509 certificates used when signing VBA projects in a workbook. The potential risk for most users should be low, as the certificates used to sign your workbooks are usually known.|Upgrade to EPPlus 6.2.6 or higher|

‎appveyor7.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,20 @@
1-
version: 7.4.0.{build}
1+
version: 7.4.1.{build}
22
branches:
33
only:
44
- develop7
55
configuration: release
66
image: Visual Studio 2022
77
init:
88
- ps: >-
9-
Update-AppveyorBuild -Version "7.4.0.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
9+
Update-AppveyorBuild -Version "7.4.1.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
1010
11-
Write-Host "7.4.0.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
11+
Write-Host "7.4.1.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
1212
dotnet_csproj:
1313
patch: true
1414
file: '**\*.csproj'
1515
version: '{version}'
16-
assembly_version: 7.4.0.{build}
17-
file_version: 7.4.0.{build}
16+
assembly_version: 7.4.1.{build}
17+
file_version: 7.4.1.{build}
1818
nuget:
1919
project_feed: true
2020
before_build:

‎docs/articles/fixedissues.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,7 @@
11
# Features / Fixed issues - EPPlus 7
2+
## Version 7.4.1
3+
* Updated for vulnerability in System.Text.Json 8.0.4 - Microsoft.Extensions.Configuration.Json 8.0.0 -> 8.0.1
4+
25
## Version 7.4.0
36
### Features
47
* Support for Conditional Formattings in Pivot tables via Pivot Areas.

‎src/EPPlus/EPPlus.csproj

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
<Project Sdk="Microsoft.NET.Sdk">
22
<PropertyGroup>
33
<TargetFrameworks>net8.0;net7.0;net6.0;netstandard2.1;netstandard2.0;net462;net35</TargetFrameworks>
4-
<AssemblyVersion>7.4.0.0</AssemblyVersion>
5-
<FileVersion>7.4.0.0</FileVersion>
6-
<Version>7.4.0</Version>
4+
<AssemblyVersion>7.4.1.0</AssemblyVersion>
5+
<FileVersion>7.4.1.0</FileVersion>
6+
<Version>7.4.1</Version>
77
<GeneratePackageOnBuild>true</GeneratePackageOnBuild>
88
<PackageProjectUrl>https://epplussoftware.com</PackageProjectUrl>
99
<Authors>EPPlus Software AB</Authors>
@@ -18,22 +18,25 @@
1818
<PackageReadmeFile>readme.md</PackageReadmeFile>
1919
<Copyright>EPPlus Software AB</Copyright>
2020
<PackageReleaseNotes>
21-
EPPlus 7.4.0
21+
EPPlus 7.4.1
2222

2323
IMPORTANT NOTICE!
2424
From version 5 EPPlus changes the license model using a dual license, Polyform Non Commercial / Commercial license.
2525
EPPlus will still have the source available, but for non Polyform NC compliant projects, EPPlus will provide a commercial license.
2626
Commercial licenses can be purchased from https://epplussoftware.com
2727
This applies to EPPlus version 5 and later. Earlier versions are still licensed LGPL.
2828

29+
## Version 7.4.1
30+
* Updated for vulnerability in System.Text.Json - Microsoft.Extensions.Configuration.Json 8.0.0 -> 8.0.1
31+
2932
## Version 7.4.0
3033
* Conditional formatting in Pivot Tables.
3134
* Support for linked pictures in drawings.
3235
* Added 2 new functions
3336
* Minor features and bug fixes. See https://epplussoftware.com/en/Developers/MinorFeaturesAndIssues
3437

3538
## Version 7.3.2
36-
* Minor features and bug fixes.
39+
* Minor features and bug fixes.
3740

3841
## Version 7.3.1
3942
* Minor features and bug fixes.

0 commit comments

Comments
 (0)