dotnet7.0-7.0.109-1.el8.ML.1

エラータID: AXSA:2023-6236:23

Release date: 
Wednesday, July 19, 2023 - 00:54
Subject: 
dotnet7.0-7.0.109-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9).

Security Fix(es):

* dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-33170
ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2023-33170
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.109-1.el8.ML.1.src.rpm
    MD5: 44e463fc44fdf8a974b4d46b5b53d749
    SHA-256: 4564e0cd41bcd96af72d20da4b3fd63df9ea035b841ab117d7010777f2e6b174
    Size: 493.66 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-7.0-7.0.9-1.el8.ML.1.x86_64.rpm
    MD5: 7b3c837b18863d91ffa86a762fb139d2
    SHA-256: 1e00f871ae2584b1a9e6e1757a9ab8878356e0f5ae1fc326de4263913cc70805
    Size: 7.40 MB
  2. aspnetcore-targeting-pack-7.0-7.0.9-1.el8.ML.1.x86_64.rpm
    MD5: c223dc5e35395f576911700f7ada5702
    SHA-256: 1ee5b25eb874b21184752c0d9d2c55f41c027c593342123ae5e9e8d2f110e815
    Size: 1.60 MB
  3. dotnet-7.0.109-1.el8.ML.1.x86_64.rpm
    MD5: 08085abaaf73a61da21f33f27375a40c
    SHA-256: 12c59a727231e2451eff1e937e3376724304d435b049684f495367fc788445f3
    Size: 17.93 kB
  4. dotnet-apphost-pack-7.0-7.0.9-1.el8.ML.1.x86_64.rpm
    MD5: 987ef2e52742dde1e9a8b798201068a3
    SHA-256: d3a947a1f7591630a59184032e563c57d433c47809c49c96b4fabe81d9726fc7
    Size: 3.97 MB
  5. dotnet-host-7.0.9-1.el8.ML.1.x86_64.rpm
    MD5: 00ad5340e5e31bb77baea009bb08f0d4
    SHA-256: 5c0ef7197fb4bd68e6d52194297ba21b6200e9d667e824640378385dacf44086
    Size: 195.27 kB
  6. dotnet-hostfxr-7.0-7.0.9-1.el8.ML.1.x86_64.rpm
    MD5: 180595b4636f39c0659702db279d05d2
    SHA-256: a200797c96670756b81408c4d8a87acd3641266ea095768c97f22e12f22219f4
    Size: 174.36 kB
  7. dotnet-runtime-7.0-7.0.9-1.el8.ML.1.x86_64.rpm
    MD5: 41e81e139a47deaf26d2359dc75913f9
    SHA-256: 526965e02c8fb0067683477ca1d7f981d043a1eb0269bd82dba4d29be03b7318
    Size: 24.14 MB
  8. dotnet-sdk-7.0-7.0.109-1.el8.ML.1.x86_64.rpm
    MD5: f015a24b1e8cf45adc98bb1230ce4e9e
    SHA-256: f47348d5e0b031454b9359eda97d35bd79254bf05ca0c09df496e1ee214ab586
    Size: 87.56 MB
  9. dotnet-targeting-pack-7.0-7.0.9-1.el8.ML.1.x86_64.rpm
    MD5: 66a095a29b3ebb3a7f6d720fe5196bba
    SHA-256: c1603fad5bf94d4e6fa810f536a8b4c3cb178421efc4ad12f012d877c3cb33b2
    Size: 2.86 MB
  10. dotnet-templates-7.0-7.0.109-1.el8.ML.1.x86_64.rpm
    MD5: 76b198b74c50b7e5699a1020959f1395
    SHA-256: 5de23cf10c9832b7469e895e292678e1325ae16c447af918bfd0d51a6f430028
    Size: 2.86 MB
  11. netstandard-targeting-pack-2.1-7.0.109-1.el8.ML.1.x86_64.rpm
    MD5: a11c96e27cb416413afcfcbfdc793a5a
    SHA-256: c5bed52bae1d4426d985b69e61c7e7ca280c35645dd52f847b40df9cee605cec
    Size: 1.51 MB