Skip to content

Update PerfView to version 3.2.4#14

Merged
ilabutin merged 1 commit into
masterfrom
update-package
Jun 17, 2026
Merged

Update PerfView to version 3.2.4#14
ilabutin merged 1 commit into
masterfrom
update-package

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Automated package update to version 3.2.4

Changes:

  • Updated package version from 3.2.3 to 3.2.4
  • Updated download URL to latest release
  • Updated checksum

Release Notes:

Security

This release contains security hardening fixes for a number of malformed-input parsing and path-traversal vulnerabilities:

  • Bounds-checking for malformed event payloads in the BPerf ULZ777 decompressor and event-record parser
  • Bounds-checking for malformed metadata in the GCDynamic, RegisteredTraceEventParser (TDH), Dynamic, and EventPipe V3 parsers
  • Bounds-checking for malformed PE CodeView and Resource directory entries
  • Path containment hardening for PDB extraction (zipped ETL + container PDBs), DiagSession resource extraction, R2R perf map writes, PdbScope module paths, and dynamic manifest writes
  • Path-traversal and command-execution hardening for Source Server lookups

What's Changed

Full Changelog: microsoft/perfview@v3.2.3...v3.2.4

@ilabutin
ilabutin merged commit 9b75113 into master Jun 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant