dotnet3.1-3.1.424-1.el8.ML.1

エラータID: AXSA:2022-3897:12

Release date: 
Monday, October 17, 2022 - 02:56
Subject: 
dotnet3.1-3.1.424-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.424 and .NET Runtime 3.1.30.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability.

Solution: 

Update packages.

CVEs: 
CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability.
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet3.1-3.1.424-1.el8.ML.1.src.rpm
    MD5: 4fe984e28d3302afcc6183d54ddebe3b
    SHA-256: 2695383eef7bbed15646f1fb4cea421eae96c2535b59670df2295acab6e8f66e
    Size: 316.01 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-3.1-3.1.30-1.el8.ML.1.x86_64.rpm
    MD5: 2fe95792309f7e400b1db3ac55808382
    SHA-256: cd42ddbe09c76a3fc3774ca9dcbcf52076f4c7c547401076bfcab45c72c0e959
    Size: 6.27 MB
  2. aspnetcore-targeting-pack-3.1-3.1.30-1.el8.ML.1.x86_64.rpm
    MD5: 148ad47ea363b044a8c9baa0f249b442
    SHA-256: 3b59b6c57c9ae8df16ff5f2d55d96d9982257b75065e0f007175747b74315507
    Size: 1.11 MB
  3. dotnet-apphost-pack-3.1-3.1.30-1.el8.ML.1.x86_64.rpm
    MD5: 7dc5aefec56ea4a84888472f4b95ebb6
    SHA-256: db0516462687e008422deced179c359818d729e7152a83d2eed93bcf5a950be1
    Size: 80.48 kB
  4. dotnet-hostfxr-3.1-3.1.30-1.el8.ML.1.x86_64.rpm
    MD5: 400dea453672657fdc7926e43bd6d037
    SHA-256: fff14a306ccabd4661ce8d70e1f0381001a6fabb05431e1ff894a8b96c0c72fb
    Size: 183.76 kB
  5. dotnet-runtime-3.1-3.1.30-1.el8.ML.1.x86_64.rpm
    MD5: 1593edd69715a9f0085242b61603669d
    SHA-256: 58f2b69cb9487b4bb0044f3c84acc81b93bce9bad6639db9b48e960b76990c47
    Size: 27.05 MB
  6. dotnet-sdk-3.1-3.1.424-1.el8.ML.1.x86_64.rpm
    MD5: 1459ee78bed46b647064d6dcecf4252c
    SHA-256: f9b44e0b47b0f3e0a6355a4c49ca1c01af9ceeac1c3c975bbfde38eb8e9b96ca
    Size: 41.82 MB
  7. dotnet-targeting-pack-3.1-3.1.30-1.el8.ML.1.x86_64.rpm
    MD5: 39a792d39f0a0de4b2c72f48d3d8dc77
    SHA-256: 36010c9d3cbf3d43aec56d955265486c548c479464ba078fe1092e59bd7187d0
    Size: 2.03 MB
  8. dotnet-templates-3.1-3.1.424-1.el8.ML.1.x86_64.rpm
    MD5: 9685b4435dee061df54adf458f4338ba
    SHA-256: c0ca6d0e8cd8890527165df925877cac9f1e130af1b7fb363f0f428a96515bd1
    Size: 2.19 MB