From eec33fb8667d7dbe17b450bb6355700efa131ef9 Mon Sep 17 00:00:00 2001
From: Nori Zhang <norizhang@microsoft.com>
Date: Mon, 24 Apr 2023 21:30:33 +0800
Subject: [PATCH 1/2] Resolve CVEs by adding dependencies of newer version.

---
 src/Compute/Compute/Compute.csproj                 | 3 ++-
 src/DataFactory/DataFactories/DataFactories.csproj | 4 +++-
 src/DataFactory/DataFactoryV2/DataFactoryV2.csproj | 2 ++
 src/Synapse/Synapse/Synapse.csproj                 | 2 ++
 4 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/src/Compute/Compute/Compute.csproj b/src/Compute/Compute/Compute.csproj
index c81378c9c709..04b04b09305c 100644
--- a/src/Compute/Compute/Compute.csproj
+++ b/src/Compute/Compute/Compute.csproj
@@ -18,9 +18,10 @@
     <PackageReference Include="Microsoft.Azure.Management.Compute" Version="60.0.0" />
     <PackageReference Include="System.Security.Permissions" Version="4.5.0" />
     <PackageReference Include="System.ServiceModel.Primitives" Version="4.7.0" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="7.0.1" />
     <PackageReference Include="WindowsAzure.Storage" Version="9.3.0" />
     <PackageReference Include="System.Management" Version="4.5.0" />
+    <!-- Include the following DLLs for security issue -->
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/DataFactory/DataFactories/DataFactories.csproj b/src/DataFactory/DataFactories/DataFactories.csproj
index 8dee59924ad9..7bc0ed99614c 100644
--- a/src/DataFactory/DataFactories/DataFactories.csproj
+++ b/src/DataFactory/DataFactories/DataFactories.csproj
@@ -15,8 +15,10 @@
     <PackageReference Include="Microsoft.Azure.Management.DataFactories" Version="4.13.3" />
     <PackageReference Include="Microsoft.DataTransfer.Gateway.Encryption" Version="4.14.7587.7" />
     <PackageReference Include="System.IO.FileSystem.AccessControl" Version="4.5.0" />
-    <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
     <PackageReference Include="WindowsAzure.Storage" Version="9.3.0" />
+    <!-- Include the following DLLs for security issue -->
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
+    <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
   </ItemGroup>
 
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildThisFileDirectory).., build.proj))\src\Az.Post.props" />
diff --git a/src/DataFactory/DataFactoryV2/DataFactoryV2.csproj b/src/DataFactory/DataFactoryV2/DataFactoryV2.csproj
index ab8d184dd601..ec16a04a31c1 100644
--- a/src/DataFactory/DataFactoryV2/DataFactoryV2.csproj
+++ b/src/DataFactory/DataFactoryV2/DataFactoryV2.csproj
@@ -14,6 +14,8 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.Azure.Management.DataFactory" Version="9.2.0" />
     <PackageReference Include="Microsoft.DataTransfer.Gateway.Encryption" Version="4.14.7587.7" />
+    <!-- Include the following DLLs for security issue -->
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
     <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
   </ItemGroup>
 
diff --git a/src/Synapse/Synapse/Synapse.csproj b/src/Synapse/Synapse/Synapse.csproj
index 3918ee21112a..6e93a2b75717 100644
--- a/src/Synapse/Synapse/Synapse.csproj
+++ b/src/Synapse/Synapse/Synapse.csproj
@@ -18,7 +18,9 @@
     <PackageReference Include="Azure.Analytics.Synapse.Spark" Version="1.0.0-preview.7" />
     <PackageReference Include="Microsoft.Azure.Management.Synapse" Version="2.6.0-preview" />
     <PackageReference Include="Microsoft.DataTransfer.Gateway.Encryption" Version="4.14.7587.7" />
+    <!-- Include the following DLLs for security issue -->
     <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
+    <PackageReference Include="System.Data.SqlClient" Version="4.8.5" />
   </ItemGroup>
 
   <ItemGroup>

From ffe7d557c57784f9c57dd089f818c5bd0c96f312 Mon Sep 17 00:00:00 2001
From: Nori Zhang <norizhang@microsoft.com>
Date: Mon, 24 Apr 2023 21:48:11 +0800
Subject: [PATCH 2/2] Restore denpendencies in Compute

---
 src/Compute/Compute/Compute.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Compute/Compute/Compute.csproj b/src/Compute/Compute/Compute.csproj
index 04b04b09305c..4d0cf08ba2f9 100644
--- a/src/Compute/Compute/Compute.csproj
+++ b/src/Compute/Compute/Compute.csproj
@@ -21,7 +21,7 @@
     <PackageReference Include="WindowsAzure.Storage" Version="9.3.0" />
     <PackageReference Include="System.Management" Version="4.5.0" />
     <!-- Include the following DLLs for security issue -->
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="7.0.1" />
   </ItemGroup>
 
   <ItemGroup>