dotnet6.0-6.0.121-1.el8.ML.1

エラータID: AXSA:2023-6348:20

Release date: 
Thursday, August 17, 2023 - 10:41
Subject: 
dotnet6.0-6.0.121-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-35390
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2023-35390
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet6.0-6.0.121-1.el8.ML.1.src.rpm
    MD5: 9d0ce86d77641b7e7aac314593ac3962
    SHA-256: fefbc889202dbe6f3bbb62325cf33a0b37f9d7267234a1f15cf2344710342dea
    Size: 509.38 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-6.0-6.0.21-1.el8.ML.1.x86_64.rpm
    MD5: 5a56fec552029b804c28d71ea699bc0f
    SHA-256: a6ee467f52d9940142b1a3b000ebfe446534c13ffefe964ab48ca98745a165ff
    Size: 6.93 MB
  2. aspnetcore-targeting-pack-6.0-6.0.21-1.el8.ML.1.x86_64.rpm
    MD5: 8263b1856ed2d7911960f69c1121d255
    SHA-256: 7fc9346f6f950c28e68df9d1a0fa47434db261b9afff51a2cea0729b78c561a8
    Size: 1.49 MB
  3. dotnet-apphost-pack-6.0-6.0.21-1.el8.ML.1.x86_64.rpm
    MD5: 90d57e3731eebc76d759c6bca9a21fe2
    SHA-256: 0a468424a3428e142c883a76eaf9b8eca042b1c2d1ac363df69d51ad8d30c635
    Size: 3.95 MB
  4. dotnet-hostfxr-6.0-6.0.21-1.el8.ML.1.x86_64.rpm
    MD5: dcb7303e37cbb11bf3951f3b413f66d8
    SHA-256: 09f4e9b49f0cfa2be0412376ca4796267247ca1a7d4dd23d6ca805c236c7cae5
    Size: 173.53 kB
  5. dotnet-runtime-6.0-6.0.21-1.el8.ML.1.x86_64.rpm
    MD5: 414822baf5607782b2429548215666c3
    SHA-256: 01d1270c2b052eccf915744497c88fca4a2b18c97bd4f516941aa36a2bd9c4b7
    Size: 23.41 MB
  6. dotnet-sdk-6.0-6.0.121-1.el8.ML.1.x86_64.rpm
    MD5: 773c782ecbe2d60d2b80544237cbbfce
    SHA-256: b1ee42b9ccb77583c01dba41761f4a09d09be68577dc3884813286330702ca49
    Size: 77.33 MB
  7. dotnet-sdk-6.0-source-built-artifacts-6.0.121-1.el8.ML.1.x86_64.rpm
    MD5: 73c100d2bb8c58e4ed3a78bf99b4e5fa
    SHA-256: 1ee00912b913295dfa3b1ca850aa5038d25bdb624104ff84689c5952c613331c
    Size: 2.71 GB
  8. dotnet-targeting-pack-6.0-6.0.21-1.el8.ML.1.x86_64.rpm
    MD5: 1a429bb5442315f6fd1e0748e980c4f7
    SHA-256: 636069efbd9ca3bdecee90238cba2a7c6d1d6cacad1b812de8a6ece5f49874f0
    Size: 2.38 MB
  9. dotnet-templates-6.0-6.0.121-1.el8.ML.1.x86_64.rpm
    MD5: 47eb3144e2bdc33a22317ab78f78ed98
    SHA-256: 8ff5a73b6da742c1a4b9f178a282d0c2d46fb3c8877cf35e06102b00d9200cee
    Size: 2.74 MB