Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Bump Microsoft.Diagnostics.Tracing.TraceEvent from 3.2.3 to 3.2.4#45

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/DllSidecar.Core/Microsoft.Diagnostics.Tracing.TraceEvent-3.2.4
Closed

Bump Microsoft.Diagnostics.Tracing.TraceEvent from 3.2.3 to 3.2.4#45
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/DllSidecar.Core/Microsoft.Diagnostics.Tracing.TraceEvent-3.2.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Diagnostics.Tracing.TraceEvent from 3.2.3 to 3.2.4.

Release notes

Sourced from Microsoft.Diagnostics.Tracing.TraceEvent's releases.

3.2.4

Security

This release contains security hardening fixes for a number of malformed-input parsing and path-traversal vulnerabilities:

  • Bounds-checking for malformed event payloads in the BPerf ULZ777 decompressor and event-record parser
  • Bounds-checking for malformed metadata in the GCDynamic, RegisteredTraceEventParser (TDH), Dynamic, and EventPipe V3 parsers
  • Bounds-checking for malformed PE CodeView and Resource directory entries
  • Path containment hardening for PDB extraction (zipped ETL + container PDBs), DiagSession resource extraction, R2R perf map writes, PdbScope module paths, and dynamic manifest writes
  • Path-traversal and command-execution hardening for Source Server lookups

What's Changed

Full Changelog: microsoft/perfview@v3.2.3...v3.2.4

Commits viewable in compare view.

@dependabot @github

dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

---
updated-dependencies:
- dependency-name: Microsoft.Diagnostics.Tracing.TraceEvent
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot force-pushed the dependabot/nuget/DllSidecar.Core/Microsoft.Diagnostics.Tracing.TraceEvent-3.2.4 branch from 2a6de37 to 149c17b Compare June 29, 2026 08:45
@tunelko

tunelko commented Jun 29, 2026

Copy link
Copy Markdown
Owner

Superseded by #50 (commit 2d23905): the same bump was hand-staged on a fresh develop branch to bypass the Dependabot autocrlf issue. Closing this PR; Dependabot will reopen if a newer version becomes available.

@tunelko tunelko closed this Jun 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/nuget/DllSidecar.Core/Microsoft.Diagnostics.Tracing.TraceEvent-3.2.4 branch June 29, 2026 08:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant