dotnet7.0-7.0.114-1.el8.ML.1

エラータID: AXSA:2024-7360:01

Release date: 
Thursday, January 11, 2024 - 07:38
Subject: 
dotnet7.0-7.0.114-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36558
ASP.NET Core - Security Feature Bypass Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36558
ASP.NET Core - Security Feature Bypass Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.114-1.el8.ML.1.src.rpm
    MD5: ae94f28655260bab449ba235f5ed7049
    SHA-256: 8500ac68d27c9524f0ad0150650e054e4baecd96105658faeead25e86165bf9a
    Size: 493.78 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-7.0-7.0.14-1.el8.ML.1.x86_64.rpm
    MD5: d5b73ec4ab0131cb8ddc2a26911f0123
    SHA-256: 1d904901d3e77349dce7b8fb4224bfb094658fcdb6489a4472d7603175502f08
    Size: 7.40 MB
  2. aspnetcore-targeting-pack-7.0-7.0.14-1.el8.ML.1.x86_64.rpm
    MD5: 2bbff71e0587a3d19206241c2d705ee3
    SHA-256: 62402d611507eee5aee70f5a7ed9bd25f0c443ac64110e8f006ee55cbd48d7a9
    Size: 1.61 MB
  3. dotnet-apphost-pack-7.0-7.0.14-1.el8.ML.1.x86_64.rpm
    MD5: 86c8832e62f69a236db66b550a5682fc
    SHA-256: 2097dc822f5538b6da42381614539ca4385712a4918ad8cfa62c24f49d543e99
    Size: 3.97 MB
  4. dotnet-hostfxr-7.0-7.0.14-1.el8.ML.1.x86_64.rpm
    MD5: 6110537252c39962305580947cb82fe6
    SHA-256: 598ed4eea276c584aa60da9a6a16a237cab3bc3e0036de415a8103cba92c7cc0
    Size: 176.58 kB
  5. dotnet-runtime-7.0-7.0.14-1.el8.ML.1.x86_64.rpm
    MD5: e0f1a7b63394fa95c2a2f5976cc890c5
    SHA-256: be31cc5fcd3c4da204b73f6c1a56f53707fe87055a1df023cf7ccefd9de892d3
    Size: 24.12 MB
  6. dotnet-sdk-7.0-7.0.114-1.el8.ML.1.x86_64.rpm
    MD5: 8e2667c8c2f22a9924409be367098ab2
    SHA-256: c4266fccdeb6c00c4ab1555531a96d622101a10adb820f89902a2aeef230e8fb
    Size: 86.65 MB
  7. dotnet-sdk-7.0-source-built-artifacts-7.0.114-1.el8.ML.1.x86_64.rpm
    MD5: 1ffb3f2244f0e8ea292be2cd46b4771c
    SHA-256: 48c397f0d276b42e9447db383a53c591a423daa7f63fc56e7d8f45ddcc3e3e2a
    Size: 885.81 MB
  8. dotnet-targeting-pack-7.0-7.0.14-1.el8.ML.1.x86_64.rpm
    MD5: 56537e03744eefa1758512dafd0bb852
    SHA-256: 3a87695530d155b484fe8741675825e0e9407f1a32f4618ffd97c1807d1829ea
    Size: 2.86 MB
  9. dotnet-templates-7.0-7.0.114-1.el8.ML.1.x86_64.rpm
    MD5: b0fd817b2d791f38878223e85e62a9b2
    SHA-256: 8d9d14dc82c971e2ac67cdf2aea85ff8df9a1be571c98f1a6c6f59a11f09bc52
    Size: 2.87 MB