when will the updated libcurl 7.32.0 < 8.9.1 DoS (CVE-2024-7264) version available in Service Fabric Runtime for Windows

Question

We have Azure Service Fabric installed on windows Server 2019 as part of SharePoint Workflows.

We recently receive multiple vulnerabilities (CVE-2024-7264) which reports C:\Program Files\Microsoft Service Fabric\bin\Fabric\Fabric.Code\libcurl.dll version to be fixed to version : 8.9.1.

The current Installed version that comes with Service Fabric Runtime for Windows (with latest version 10.1.2493.9590) is : 7.84.0.0.

Could you please let us know in which version of Service Fabric Releases. will this be fixed?

Answer 1

Hi Joshi, S. (Shravan),

Thank you for reaching out with your question regarding the libcurl update within Azure Service Fabric. For the most accurate and up-to-date information on when this vulnerability (CVE-2024-7264) will be addressed in an upcoming Service Fabric release, I recommend contacting Microsoft Support directly. They can provide guidance on the update schedule and any potential workarounds.

Please reach out to Microsoft Support here to get specialized assistance. When submitting your ticket, include any relevant details and screenshots to help expedite troubleshooting.