diff --git a/release-notes/2.1/2.1.7/2.1.7.md b/release-notes/2.1/2.1.7/2.1.7.md index d4fbcc6b..548db603 100644 --- a/release-notes/2.1/2.1.7/2.1.7.md +++ b/release-notes/2.1/2.1.7/2.1.7.md @@ -42,7 +42,7 @@ See [.NET Core Supported OS Lifecycle Policy](https://github.com/dotnet/core/blo * Support for Fedora 29 has been added for .NET Core 2.1. ## Changes in 2.1.7 -.NET Core 2.1.7 release carries both security and non-security fixes, covering the listed vulnerabilites (see below CVEs), changes related to the addition of new era to the Japanese calendar and Cryptography related fixes. All fixes of note can be seen in the [2.1.7 commits](2.1.7-commits.md) list. +.NET Core 2.1.7 release carries both security and non-security fixes, covering the listed vulnerabilites (see CVEs below), changes related to the addition of new era to the Japanese calendar and Cryptography related fixes. All fixes of note can be seen in the [2.1.7 commits](2.1.7-commits.md) list. * ### [CVE-2019-0545: .NET Core Information Disclosure Vulnerability](https://github.com/dotnet/Announcements/issues/XX) **Executive summary** @@ -88,6 +88,7 @@ See [.NET Core Supported OS Lifecycle Policy](https://github.com/dotnet/core/blo The update addresses the vulnerability by correcting how .NET Core handles these files. **Package and Binary updates** + Package name | Vulnerable versions | Secure versions ------------ | ------------------- | ------------------------- System.IO.Compression.ZipFile | 4.0.0, 4.0.1, 4.3.0 | 4.3.1 diff --git a/release-notes/2.2/2.2.1/2.2.1.md b/release-notes/2.2/2.2.1/2.2.1.md index 02ef5b88..41faab8b 100644 --- a/release-notes/2.2/2.2.1/2.2.1.md +++ b/release-notes/2.2/2.2.1/2.2.1.md @@ -87,6 +87,7 @@ See [.NET Core Supported OS Lifecycle Policy](https://github.com/dotnet/core/blo The update addresses the vulnerability by correcting how .NET Core handles these files. **Package and Binary updates** + Package name | Vulnerable versions | Secure versions ------------ | ------------------- | ------------------------- System.IO.Compression.ZipFile | 4.0.0, 4.0.1, 4.3.0 | 4.3.1