.NET upgrade

[pugaz-bits1n0]

Any plans to upgrade to the latest .NET version. Asking this with regards to this CVE-2019-0820, impacting the regular expressions library.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0820

[oleg-nenashev]

The request is about the .NET Core distribution only, right?

…

On Sun, Jun 19, 2022 at 5:07 PM pugaz-bits1n0 ***@***.***> wrote: Any plans to upgrade to the latest .NET version. Asking this with regards to this CVE-2019-0820 <https://github.com/advisories/GHSA-cmhx-cq75-c4mj>, impacting the regular expressions library. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0820 — Reply to this email directly, view it on GitHub <#946>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAW4RIFL4P3V5OQOZU6VRA3VP4ZR3ANCNFSM5ZGQPCMA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[viceice]

yes, dotnet 5 is EOL since May 10, 2022

https://dotnet.microsoft.com/en-us/platform/support/policy/dotnet-core

So even the v2 version should get an update to net6 with is a lts release again.

I can provide a PR for v2 if it will be accepted

[nxtn]

2.12.0 is now on .NET 6.