dotnet3.1-3.1.108-2.0.1.el8

エラータID: AXSA:2020-740:02

Release date: 
Thursday, October 15, 2020 - 11:55
Subject: 
dotnet3.1-3.1.108-2.0.1.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core SDK 3.1.108 and .NET Core Runtime 3.1.8.

Security Fixes:

* .NET Core: ASP.NET cookie prefix spoofing vulnerability (CVE-2020-1045)

Default inclusions for applications built with .NET Core have been updated to reference the newest versions and their security fixes.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-1045
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2020-1045
A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'.
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet3.1-3.1.108-2.0.1.el8.src.rpm
    MD5: 867b4ac1fb816d7b2feabadf64606575
    SHA-256: 32b247c22a296412311b7f2caa25468669958f7b73b296c40d7db1d991ecb4f3
    Size: 2.32 GB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-3.1-3.1.8-2.0.1.el8.x86_64.rpm
    MD5: 4006ec0aad93b8fd521873a79d214633
    SHA-256: fee0bbfd593094c883cb0bcc2edeaf4709a9860a2200eb2dd74ad78628cda984
    Size: 6.15 MB
  2. aspnetcore-targeting-pack-3.1-3.1.8-2.0.1.el8.x86_64.rpm
    MD5: df7b122329007026675031844f83c472
    SHA-256: 84de02cebf1de19943ea04acf0603e0cc038a95f2e68925c6ea2c3d9c2a725e2
    Size: 0.99 MB
  3. dotnet-3.1.108-2.0.1.el8.x86_64.rpm
    MD5: e264afcc39e32b04b2d9aec086976cf6
    SHA-256: 5624bf4b5b458d00bacc389c011467ee5d75254ac107a0f619973ffda7e807da
    Size: 14.67 kB
  4. dotnet-apphost-pack-3.1-3.1.8-2.0.1.el8.x86_64.rpm
    MD5: d1c1b71e732556f7843889b3a04a6150
    SHA-256: 458ad6e396c2a24010e1bbe7a5b66553fcf89fd6d0ed19edfd6a9e5cdb30b34f
    Size: 70.43 kB
  5. dotnet-host-3.1.8-2.0.1.el8.x86_64.rpm
    MD5: 429e31f42722cd5be9b3a4f70d0702d4
    SHA-256: fcdf80800e194368b5ac148154ca8670bd12fdd5c7ad9a7004e8f68c4ba481ef
    Size: 105.65 kB
  6. dotnet-hostfxr-3.1-3.1.8-2.0.1.el8.x86_64.rpm
    MD5: 0cf0d814d518458e88871906dba17a43
    SHA-256: 7efce8abf140cbda3521229e2b8f1b45c86ddd0dc74ed241620fe6177fdb6347
    Size: 160.68 kB
  7. dotnet-runtime-3.1-3.1.8-2.0.1.el8.x86_64.rpm
    MD5: f7d561b8d0c3b7485aef6f7d422c3a2f
    SHA-256: c89eafecfb2a4cb11b3ebb1642d719235508bf968064c8fedfb9ba401d492230
    Size: 26.71 MB
  8. dotnet-sdk-3.1-3.1.108-2.0.1.el8.x86_64.rpm
    MD5: 1ca232dc39adb0491a3c463632951d2c
    SHA-256: 903240733413629975c03e2c1947839efcd2f16099c20719546c1cab26e11679
    Size: 39.87 MB
  9. dotnet-targeting-pack-3.1-3.1.8-2.0.1.el8.x86_64.rpm
    MD5: a98f652835ee8ebf95f569b493ceb09f
    SHA-256: 67fcabb7de56abecbb0869958595a623c3664e4a84227512fcbb499274a97430
    Size: 2.02 MB
  10. dotnet-templates-3.1-3.1.108-2.0.1.el8.x86_64.rpm
    MD5: bd9455a985537c111cfbd73f23b4f2da
    SHA-256: 3678bb8047efffd68f6ad07186b9b1f6bcda6601870314e94d9eb61f2cf6f70a
    Size: 1.81 MB
  11. netstandard-targeting-pack-2.1-3.1.108-2.0.1.el8.x86_64.rpm
    MD5: 55c2af24d827faa6f5044a20d6fc0276
    SHA-256: ab396b9a97a2676e282dbce3daf48f53eb1cd8028937a12bc2d63214b9d6e555
    Size: 1.51 MB