dotnet7.0-7.0.114-1.el9_3.ML.1

エラータID: AXSA:2023-7071:33

Release date: 
Friday, December 22, 2023 - 06:17
Subject: 
dotnet7.0-7.0.114-1.el9_3.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36558
ASP.NET Core - Security Feature Bypass Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36558
ASP.NET Core - Security Feature Bypass Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.114-1.el9_3.ML.1.src.rpm
    MD5: d2335904b24277a1a7185c0b38dc397e
    SHA-256: 2f210414c858e37a848ca3608c80fb28d0e2701231aac7a4ee87c79caae1829e
    Size: 493.79 MB

Asianux Server 9 for x86_64
  1. aspnetcore-runtime-7.0-7.0.14-1.el9_3.ML.1.x86_64.rpm
    MD5: 364306e2d5d5f7f53d6bdc0e6be69d5b
    SHA-256: 4e66c1a53d08f9d9dd17b3f8c6addedbc85380a29900c4fd34258a93d9e21b60
    Size: 7.33 MB
  2. aspnetcore-targeting-pack-7.0-7.0.14-1.el9_3.ML.1.x86_64.rpm
    MD5: aab5ab30722f0adb1829b0ac47c93d9e
    SHA-256: 5051d8997bb57fed2f18b86dc0a06db87c78b744b8d3d13e954dfa6ffef7885f
    Size: 1.51 MB
  3. dotnet-apphost-pack-7.0-7.0.14-1.el9_3.ML.1.x86_64.rpm
    MD5: 85763954c88245add7e42efa3d6fedb9
    SHA-256: 3399c0bce9b976a6465347c377b59feaef273dc54df086ecef84f0302c388831
    Size: 3.95 MB
  4. dotnet-hostfxr-7.0-7.0.14-1.el9_3.ML.1.x86_64.rpm
    MD5: cca683e77d37579078c75313e24990a9
    SHA-256: 7fa178cb6420fa164c40ab9f138fc74b9c2cb29a8cf9cdfa5942e77cc1745d8c
    Size: 166.84 kB
  5. dotnet-runtime-7.0-7.0.14-1.el9_3.ML.1.x86_64.rpm
    MD5: 78fad74e3692f6c3dd5455df883617bf
    SHA-256: c0735b4b4c42997ee0a2c006afb164e07ce2c6b5ff40ae5cd0dbd33f42d1e548
    Size: 23.73 MB
  6. dotnet-sdk-7.0-7.0.114-1.el9_3.ML.1.x86_64.rpm
    MD5: fa603d488327a736dc1556910fa57fd7
    SHA-256: 7720ce7df376bebc80f90f61b7db5712ee9f6a80a8cd2c2d411584b2000cac2b
    Size: 85.03 MB
  7. dotnet-sdk-7.0-source-built-artifacts-7.0.114-1.el9_3.ML.1.x86_64.rpm
    MD5: 21a6ccdd71c0387a2d878aec09dda255
    SHA-256: 332745208b50f79bc102a20a760a46dcaef47a52697801039a0293bea6838e94
    Size: 810.30 MB
  8. dotnet-targeting-pack-7.0-7.0.14-1.el9_3.ML.1.x86_64.rpm
    MD5: e297f04d8790d59a547b26dd94f39e09
    SHA-256: bef4a9d01a45f30ce5fdfb347d4bfae726c86966dd16ba28de1220108e949939
    Size: 2.60 MB
  9. dotnet-templates-7.0-7.0.114-1.el9_3.ML.1.x86_64.rpm
    MD5: ead1478610f24848b6588d79a0803b9c
    SHA-256: 7d1e5fde2072be91aec3692361b63e6167e09971fbb2270451696c17551d5692
    Size: 2.72 MB