Microsoft starts 2024 right with another slimline Patch Tuesday drop, but there are some critical vulns to be alert to, including a number of man-in-the-middle attack vectors
.NET devs have been struggling to deal with errors affecting non-Windows SqlClients under heavy load Share
Copy
Back in February, .NET software developers using Microsoft.Data.SqlClient, an open source data access driver for Microsoft SQL Server, noticed that certain queries were slow or timed out on Linux under specific circumstances.
The issue (#442), reported on GitHub, has lingered unfixed for almost a year now.
In July, Nerijus Arlauskas, a developer based in Lithuania, found that non-Windows clients (macOS, Linux, WSL, Docker) sometimes returned invalid results for queries, a separate but perhaps related issue (#659).
It s a potentially serious problem when a database provides inaccurate information. Under no circumstances a SELECT statement should return a different result, Arlauskas wrote in his report. This can cause application crashes, personal data leaks, users purchasing products on behalf of other users, and security breaches.