dotnet7.0-7.0.100-0.5.rc2.el9.ML.1

エラータID: AXSA:2023-5051:06

Release date: 
Friday, February 10, 2023 - 01:00
Subject: 
dotnet7.0-7.0.100-0.5.rc2.el9.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100).

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability.

Solution: 

Update packages.

CVEs: 
CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability.
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.100-0.5.rc2.el9.ML.1.src.rpm
    MD5: b5513d342890ac49f9c4eb784e4767ad
    SHA-256: 9cc01cabbc1b25b3a87dce474244d16e893ff8e673aa1d8439747468d3814bce
    Size: 2.51 GB

Asianux Server 9 for x86_64
  1. aspnetcore-runtime-7.0-7.0.0-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: 96e6a6e1cc26f1a759e974fada499cef
    SHA-256: 89ff97df6ab7fcb300297837cdf5e970debba64284c5035edc572cce1db5b5dc
    Size: 7.32 MB
  2. aspnetcore-targeting-pack-7.0-7.0.0-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: 0cfa42f4fc849b9b883f299a83625cb7
    SHA-256: d676705f763259b5cb7ee4a7c1dafd8dc97a1948e71764bbc2d70fdea2d6fe85
    Size: 1.50 MB
  3. dotnet-apphost-pack-7.0-7.0.0-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: 99b3e996ec6b28753d7a8f528e28a570
    SHA-256: 93463ad3ab16b9c9e1e2f8a904b7f3fba4baa69c9aeb8e9a53b15abbe932dc3c
    Size: 3.97 MB
  4. dotnet-host-7.0.0-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: 00bb8ca505488b99c6684ef0f02b293b
    SHA-256: f5242a5ec04a89623086b4ff9550019a1f2f6b6e5ce1a61743d73411ac032be8
    Size: 177.46 kB
  5. dotnet-hostfxr-7.0-7.0.0-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: 6030c1d553e60eb924646f111ef72b18
    SHA-256: eac891b09f19b97b0c940912922674f0fdb078a77028d1942797bcc994ea63ca
    Size: 167.99 kB
  6. dotnet-runtime-7.0-7.0.0-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: 75bc18d9aa80af93c56b410308b83771
    SHA-256: 97fad32bbf23a6d314ae4799ff86269a7283104b690b267c9c39deffb589decb
    Size: 23.74 MB
  7. dotnet-sdk-7.0-7.0.100-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: ed9af8543d3e60b2b341d9d2e9dc18bd
    SHA-256: 1075addf056268eb9c351eb56b986576d93d772fd5a23f4cea85b88584e93112
    Size: 82.74 MB
  8. dotnet-targeting-pack-7.0-7.0.0-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: c100cf876f1a76391188299430234343
    SHA-256: 7419190bd198b3fe8296b9e6e853d3d2a91e60bcd1e6834b4beee6a7d9b64d84
    Size: 1.30 MB
  9. dotnet-templates-7.0-7.0.100-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: ec048c07ebec8030a4d8775e627a19ed
    SHA-256: d53655a28fbf655cb8eb19437cf356471dc2b569b58b94be715b0464f351082e
    Size: 2.70 MB
  10. netstandard-targeting-pack-2.1-7.0.100-0.5.rc2.el9.ML.1.x86_64.rpm
    MD5: 82e86692fd8a77713090b5eafb3e234a
    SHA-256: 10d5c3973ffcfb06fb63b3a7727fa09376163f84184b8cac41d4c089c1ab4a91
    Size: 1.32 MB