dotnet6.0-6.0.125-1.el8.ML.1

エラータID: AXSA:2024-7361:01

Release date: 
Thursday, January 11, 2024 - 07:46
Subject: 
dotnet6.0-6.0.125-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36558
ASP.NET Core - Security Feature Bypass Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36558
ASP.NET Core - Security Feature Bypass Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet6.0-6.0.125-1.el8.ML.1.src.rpm
    MD5: 4a2f510e492b179ba2595bd6aa053dc3
    SHA-256: 986f47814aa09de2c5068150e196ea58de6c9e09466df7455760de7e5c7551a4
    Size: 510.00 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-6.0-6.0.25-1.el8.ML.1.x86_64.rpm
    MD5: 2b4f3a321e8dd8dbaac94043436c8b7c
    SHA-256: ed477c7f658c0bb335a17f9eebdc3927a6d29a0fb774131f019e9d4ad1d7b745
    Size: 6.94 MB
  2. aspnetcore-targeting-pack-6.0-6.0.25-1.el8.ML.1.x86_64.rpm
    MD5: 6889fdba06a947ac63e0ac67513f1ca4
    SHA-256: 3be91c60e2212846bd85c7bbb09fb5d732c4013de8fce6f839a2558bf6798ecd
    Size: 1.49 MB
  3. dotnet-apphost-pack-6.0-6.0.25-1.el8.ML.1.x86_64.rpm
    MD5: b110e5ee9fd8a96b7c31e3c436c562a9
    SHA-256: 7193a5216a7c183970399724368a742ea11ce928e1be607ce4ef1076a753f19e
    Size: 3.95 MB
  4. dotnet-hostfxr-6.0-6.0.25-1.el8.ML.1.x86_64.rpm
    MD5: a5222db1f32634177fa75cf0ffadd51d
    SHA-256: a2e63024bc3f59dfe12dfffe30b671a2e402de8171f7054ea4d731e9bd02299e
    Size: 175.16 kB
  5. dotnet-runtime-6.0-6.0.25-1.el8.ML.1.x86_64.rpm
    MD5: 28b72f4915f5bd0d9c6036586f5c4f96
    SHA-256: 0630e9e20e234568e20734d07477917259d7571cbe51fb10fd7fbfe7e330963b
    Size: 23.40 MB
  6. dotnet-sdk-6.0-6.0.125-1.el8.ML.1.x86_64.rpm
    MD5: 1f74c7fe08c5a92674d6c22389152f00
    SHA-256: fe297aacf6a72251dae9ba1748138c90b6d82cde73dd38ff0b4ca2d1b5046e68
    Size: 78.01 MB
  7. dotnet-sdk-6.0-source-built-artifacts-6.0.125-1.el8.ML.1.x86_64.rpm
    MD5: 2120e6dbce28fec3b14eac33e95af55e
    SHA-256: d8adcee42433e0b935f3c3ab959f9778fa70ca5d16c54b3b3eef3794aff4f28b
    Size: 2.68 GB
  8. dotnet-targeting-pack-6.0-6.0.25-1.el8.ML.1.x86_64.rpm
    MD5: 834dab4ea06400533054422ff19b694e
    SHA-256: bd8a0b23530d54b06e7e40599669f366cd6de66366c610600b43566ab8198575
    Size: 2.38 MB
  9. dotnet-templates-6.0-6.0.125-1.el8.ML.1.x86_64.rpm
    MD5: 0ae3834690f984ced28e6e146eb47f4f
    SHA-256: 182c40e503f7471ce059c55f74084055fc11fb0b07c3fe63347792f91293517b
    Size: 2.68 MB