dotnet6.0-6.0.120-1.el8.ML.1

エラータID: AXSA:2023-6237:19

Release date: 
Wednesday, July 19, 2023 - 01:12
Subject: 
dotnet6.0-6.0.120-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20).

Security Fix(es):

* dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-33170
ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2023-33170
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet6.0-6.0.120-1.el8.ML.1.src.rpm
    MD5: f611817b5ea644214ec85ada41ebd16f
    SHA-256: be2998a2809674ab2a81533eecb1fbdf6e748f504d49897e95fe837fd62d819b
    Size: 509.10 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-6.0-6.0.20-1.el8.ML.1.x86_64.rpm
    MD5: 6d3228a444942c60d0bba216e1bb0bf3
    SHA-256: 6b26bdd7e3a90e6b70d7bcb79799e47bb150b5cdaffa51d521c94d5ecd4caacc
    Size: 6.93 MB
  2. aspnetcore-targeting-pack-6.0-6.0.20-1.el8.ML.1.x86_64.rpm
    MD5: c2852854661aeef4c4b4e45ea9c17831
    SHA-256: dab6deb3ee84b44a98e31adc549d695a5e180be9af0f271d71fcc92776b2d700
    Size: 1.49 MB
  3. dotnet-apphost-pack-6.0-6.0.20-1.el8.ML.1.x86_64.rpm
    MD5: 96f1dc1d58c51fee0c6356efe1bf69d8
    SHA-256: 287e6396e307fbba661d526450888fb999fb8ac01fcd7e3e70129c17cac3ddcd
    Size: 3.95 MB
  4. dotnet-hostfxr-6.0-6.0.20-1.el8.ML.1.x86_64.rpm
    MD5: 59ce4e2b869df2a5950b20ce7f0c0b7e
    SHA-256: 469253993b83613a032bc2c42ac72caa24c6b0dffedd818fdc0a2b01230f5ca6
    Size: 173.41 kB
  5. dotnet-runtime-6.0-6.0.20-1.el8.ML.1.x86_64.rpm
    MD5: 7fc491d14180fb32d6b2b680daa6fdac
    SHA-256: f0793f6e6290d69c6bf8af27cbfc305eb1630405550df58830350327cd07d61f
    Size: 23.41 MB
  6. dotnet-sdk-6.0-6.0.120-1.el8.ML.1.x86_64.rpm
    MD5: a9933e16ec6183a14cfaf3fe06d25fbb
    SHA-256: 1ddaa1e47277c453604a33dcafeb210e20535e78b55ac89355bce8a0295532af
    Size: 77.33 MB
  7. dotnet-sdk-6.0-source-built-artifacts-6.0.120-1.el8.ML.1.x86_64.rpm
    MD5: 48de06267554530ec4fd8f37fef2009b
    SHA-256: 1bea4152956960cc6b1bd7568293505720352d57100c7dbdf6b6de9a0211d875
    Size: 2.71 GB
  8. dotnet-targeting-pack-6.0-6.0.20-1.el8.ML.1.x86_64.rpm
    MD5: a0256ae66a0d26436162979b494ad8f5
    SHA-256: 61345e68eae67a5794bc943ed96ba25d1f3377077b10501262668b9e26cc3b01
    Size: 2.38 MB
  9. dotnet-templates-6.0-6.0.120-1.el8.ML.1.x86_64.rpm
    MD5: e81b1b203b6ce1784f6f5fb14fa7c80e
    SHA-256: 554799519d0ea150ce41fe9bed246b58ee99ef55cb6af8ec36ff761e14b1203c
    Size: 2.67 MB