dotnet7.0-7.0.112-1.el9.ML.1

エラータID: AXSA:2023-6508:28

Release date: 
Wednesday, October 18, 2023 - 07:25
Subject: 
dotnet7.0-7.0.112-1.el9.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Solution: 

Update packages.

CVEs: 
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.112-1.el9.ML.1.src.rpm
    MD5: fb519a7d77f3e290f853b8212e21c0c5
    SHA-256: 7628d987d20844108c850353ae32d332cc6440bd7542d03f9d0fc6a8540129b3
    Size: 493.85 MB

Asianux Server 9 for x86_64
  1. aspnetcore-runtime-7.0-7.0.12-1.el9.ML.1.x86_64.rpm
    MD5: fe5b532df15fe3d87510b27a3d87d9b7
    SHA-256: befe02b99ecc2673e645f0b8ef2801e774f6a812990e06e84372698ea141c499
    Size: 7.33 MB
  2. aspnetcore-targeting-pack-7.0-7.0.12-1.el9.ML.1.x86_64.rpm
    MD5: 05539e85337e337a74330ea1867ec514
    SHA-256: b391c893f8e089422dcd1ed5895f560c2c5fe4068b02cd579a3848947f2cf18b
    Size: 1.51 MB
  3. dotnet-apphost-pack-7.0-7.0.12-1.el9.ML.1.x86_64.rpm
    MD5: 030cd6c8b11094d3f97ecdd09764fa50
    SHA-256: bbb42b417c96cd6e42d850269ccbd861bb1eedc73180da1d1187da13ae420a3c
    Size: 3.95 MB
  4. dotnet-host-7.0.12-1.el9.ML.1.x86_64.rpm
    MD5: 6a6d10582b49f40eb1514f0ab62d8447
    SHA-256: 8bb7f2ecf17c4abf761a360508af311c8dd8731b6258950c15067812ee897b24
    Size: 183.55 kB
  5. dotnet-hostfxr-7.0-7.0.12-1.el9.ML.1.x86_64.rpm
    MD5: 99e905f4b630724998c711c9bd773f02
    SHA-256: a474e359065441b6592adb69b84cde2540ffa30dc3e935118360b35e1d31ce42
    Size: 165.46 kB
  6. dotnet-runtime-7.0-7.0.12-1.el9.ML.1.x86_64.rpm
    MD5: f19368947c5d7633ed9e1cd66a7fda19
    SHA-256: 189294f1e0243abe3a9ff7790d3ed92c4fe976f4996d3f089fd7b9a70ffa20d9
    Size: 23.74 MB
  7. dotnet-sdk-7.0-7.0.112-1.el9.ML.1.x86_64.rpm
    MD5: af2d503eebd0a4b0a7ada1e2bec21979
    SHA-256: 7f3c9b1f2591877c32d5a4420cc302beb494c7593ac2c1f65adb67298fd68eda
    Size: 85.03 MB
  8. dotnet-sdk-7.0-source-built-artifacts-7.0.112-1.el9.ML.1.x86_64.rpm
    MD5: a99b01cdadb95efe178ce42f15202caa
    SHA-256: 1b1ec226603218c654aa5491530d78667b28dea7673aa5e8d6bf908853c9a6fc
    Size: 815.70 MB
  9. dotnet-targeting-pack-7.0-7.0.12-1.el9.ML.1.x86_64.rpm
    MD5: a7f9242c4d26aaeafb4ca3e999336489
    SHA-256: 8a99ebb4b7d25dba8d919905595f5bbee0538bea185212dada4233c3000410d0
    Size: 2.60 MB
  10. dotnet-templates-7.0-7.0.112-1.el9.ML.1.x86_64.rpm
    MD5: 6de3c4a99ee8527c2273c97d149222c9
    SHA-256: 5ca3d525ec181fc27f59064deef72be616f01c32ca9aca43ddf2f1bb5393dac9
    Size: 2.72 MB
  11. netstandard-targeting-pack-2.1-7.0.112-1.el9.ML.1.x86_64.rpm
    MD5: a4490672d6431cb7d1215f317f02e237
    SHA-256: 9cf6333bd50dd44914354179494131df8e0e12efb7c716912aaff8e8931903ba
    Size: 1.32 MB