[Question]: OpenSSL vulnerability appointment on Windows Defender

[veripagraul]

Describe your question

We have an OpenSSL vulnerability on our Virtual Machine with the Azure Agent. Since the DLL path is part of the agent package, we don't know how to resolve it.

Versions

4.255

Environment type (Please select at least one enviroment where you face this issue)

• Self-Hosted
• Microsoft Hosted
• VMSS Pool
• Container

Azure DevOps Server type

dev.azure.com (formerly visualstudio.com)

Operation system

No response

Version controll system

No response

Azure DevOps Server Version (if applicable)

No response

[sanjuyadav24]

Thank you for reporting this. We're currently working on updating the MinGit version to address the vulnerability.