dotnet3.1-3.1.423-1.el8.ML.1

エラータID: AXSA:2022-3850:11

Release date: 
Friday, September 16, 2022 - 04:56
Subject: 
dotnet3.1-3.1.423-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.423 and .NET Runtime 3.1.29.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-38013
.NET Core and Visual Studio Denial of Service Vulnerability.

Solution: 

Update packages.

CVEs: 
CVE-2022-38013
.NET Core and Visual Studio Denial of Service Vulnerability.
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet3.1-3.1.423-1.el8.ML.1.src.rpm
    MD5: 3fe2ddae197acfba24ccfe3db28bb730
    SHA-256: 9d78febdf0d76c9cfc6ad16267a478f4e926c04a4435f68e81b6005739bedf7b
    Size: 315.94 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-3.1-3.1.29-1.el8.ML.1.x86_64.rpm
    MD5: a46262234a9c476bd974c6471b5ab8de
    SHA-256: ba052312d01f5fb3fa54a3f272ce27bffd42e52790fb19db14f1f4088232072a
    Size: 6.27 MB
  2. aspnetcore-targeting-pack-3.1-3.1.29-1.el8.ML.1.x86_64.rpm
    MD5: 2fa58cfd9304cb7c9e0abe978778f6dd
    SHA-256: 67b7121bfc434d5895538f2bdfa5d7b954f47cd64837baf8d9c501d8ab9e27f9
    Size: 1.11 MB
  3. dotnet-apphost-pack-3.1-3.1.29-1.el8.ML.1.x86_64.rpm
    MD5: 3f07542830d4b29009d271eff814768e
    SHA-256: 095cd3ac4afe5ac828566218359e3446d85a864c7031c215916c8dce3f514f69
    Size: 80.35 kB
  4. dotnet-hostfxr-3.1-3.1.29-1.el8.ML.1.x86_64.rpm
    MD5: a7d384ba576a61952fec70f6190930c9
    SHA-256: 93690e4665fb6b51d8417a5ab0e6673f8af968ff7d875ff2ea48161d544c9a67
    Size: 183.69 kB
  5. dotnet-runtime-3.1-3.1.29-1.el8.ML.1.x86_64.rpm
    MD5: d31ef3bce927b564368a71ae326b9867
    SHA-256: 54028697c634663eb25199e147bbdf44da9330607c595cbbfafaa951c1fca235
    Size: 27.05 MB
  6. dotnet-sdk-3.1-3.1.423-1.el8.ML.1.x86_64.rpm
    MD5: abba3d080b86bf9083bd91511a570842
    SHA-256: bad2812a16fbcd5b31ae44c40d0bf660d09ae574a3aeba6004b288a115928d6f
    Size: 41.82 MB
  7. dotnet-targeting-pack-3.1-3.1.29-1.el8.ML.1.x86_64.rpm
    MD5: 212674bdec47e43f9f5bbcc5482097f9
    SHA-256: ac4cf3fee0ddce58a035c618241f1fd4dae41565ca6122b86aac90de4c7d7e4b
    Size: 2.02 MB
  8. dotnet-templates-3.1-3.1.423-1.el8.ML.1.x86_64.rpm
    MD5: edfee5e83e68a5fadf71f63db43599e5
    SHA-256: 3ce2113da2353799c5009489bb52d9e465a4c7a746a579495e9f87c56c2838d8
    Size: 2.19 MB