dotnet7.0-7.0.110-1.el8.ML.1

エラータID: AXSA:2023-6347:25

Release date: 
Thursday, August 17, 2023 - 10:09
Subject: 
dotnet7.0-7.0.110-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-35390
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2023-35390
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.110-1.el8.ML.1.src.rpm
    MD5: 295219df5ffb623599875d0e4db77451
    SHA-256: c0ebe688f70a04249408165bdd6557413f326987bb5e9ccf27b7ce4902988c73
    Size: 493.78 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-7.0-7.0.10-1.el8.ML.1.x86_64.rpm
    MD5: 0e516ac70c734ff9198fb2b053489569
    SHA-256: 84b03919d70919340e64280020799cab8d8b1ba64f58fa8263ab81e8ad9e6940
    Size: 7.40 MB
  2. aspnetcore-targeting-pack-7.0-7.0.10-1.el8.ML.1.x86_64.rpm
    MD5: 312f009905c42e521047595dde58759e
    SHA-256: bcf03f53b14c2e9fa5da311b9990eec5c80db8d03442bb9e46b0e1e72fc14c18
    Size: 1.61 MB
  3. dotnet-7.0.110-1.el8.ML.1.x86_64.rpm
    MD5: 3375d25fe585d13b529cdc3749e7c539
    SHA-256: bfab63873a17be296fb3854a507b438c388e3d7ae2625cf476fbf83678232eef
    Size: 18.05 kB
  4. dotnet-apphost-pack-7.0-7.0.10-1.el8.ML.1.x86_64.rpm
    MD5: 6dffb55ab37ccb2d7eaa6694503ad128
    SHA-256: 1006f2929310cc166aab48af0251081776187caf38d638e53c683ac55c1c425f
    Size: 3.97 MB
  5. dotnet-host-7.0.10-1.el8.ML.1.x86_64.rpm
    MD5: 0cb4937854e3afb377a0622391b95906
    SHA-256: 6c39be3f89cf46b4258b5e28f1a0b7620ef72dd0884b1acb4ce955cb4e14dcb2
    Size: 195.39 kB
  6. dotnet-hostfxr-7.0-7.0.10-1.el8.ML.1.x86_64.rpm
    MD5: c8379a598dac2d9bb7d68ff87e3cc7b1
    SHA-256: 97b4df4287713d4ca13e18f8175be9486c4087b570d99f390b464e03f06ead57
    Size: 174.48 kB
  7. dotnet-runtime-7.0-7.0.10-1.el8.ML.1.x86_64.rpm
    MD5: 7d88ac2ee2e2ec04a72a23cbb668ab11
    SHA-256: 7cd68be01cbdbf6d7d3d2ff490d252553472bac4e808a86bafff457878c1fb23
    Size: 24.14 MB
  8. dotnet-sdk-7.0-7.0.110-1.el8.ML.1.x86_64.rpm
    MD5: bb277306b9eeac80df80b06bd79c80d7
    SHA-256: 90e4624b44fa7bdcc3b2eed7d47327964c2a6a93c0b9e98125988f7c72744a9a
    Size: 87.56 MB
  9. dotnet-targeting-pack-7.0-7.0.10-1.el8.ML.1.x86_64.rpm
    MD5: c611420ed27c0ea8c82ea79f950846e0
    SHA-256: 71ac6af6f1b49f9d88213e13d518c3dc1a804d6113f5830b870f8fc19f0b42ff
    Size: 2.86 MB
  10. dotnet-templates-7.0-7.0.110-1.el8.ML.1.x86_64.rpm
    MD5: c7bd0852261beb7d54a9bbb311687d87
    SHA-256: d87b5d269b5c7185ce31ea3f41e2aee9a81d6a9e879ccbcbacf9d681857545ab
    Size: 2.87 MB
  11. netstandard-targeting-pack-2.1-7.0.110-1.el8.ML.1.x86_64.rpm
    MD5: 6238ee6553ddd96d365040b797f1b045
    SHA-256: cddf2c51823d18ee519a5a356ed55c10d4f54d1d42e9bf89b12eb41e78642b31
    Size: 1.51 MB