dotnet7.0-7.0.115-1.el8_9.ML.1

エラータID: AXSA:2024-7407:02

Release date: 
Wednesday, January 17, 2024 - 04:25
Subject: 
dotnet7.0-7.0.115-1.el8_9.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET
framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available.
The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient
(SDS) (CVE-2024-0056)
dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE(s):
CVE-2024-0056
CVE-2024-0057
CVE-2024-21319

Solution: 

Update packages.

CVEs: 
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2024-21319
Microsoft Identity Denial of service vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.115-1.el8_9.ML.1.src.rpm
    MD5: b405a021eb66478d0e7c5145d2e56e7b
    SHA-256: 79bac5d7a4578fbdd437ab337b4d1a8fd5b08d2e899374e79ed932fe70ee1e3f
    Size: 494.06 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-7.0-7.0.15-1.el8_9.ML.1.x86_64.rpm
    MD5: a24f13fc96f86b18398a35ea5c4450ad
    SHA-256: 2361d49815bdb17529ea8d3b86d58e6c9a92dda719a2a2a671ab564274e59606
    Size: 7.40 MB
  2. aspnetcore-targeting-pack-7.0-7.0.15-1.el8_9.ML.1.x86_64.rpm
    MD5: ee5e125dd2bd1f88df116baabe1b831f
    SHA-256: 51d14a141c9dc79c789087e915abf6a681f46c6fc4f7861ec753f8f216288bc7
    Size: 1.61 MB
  3. dotnet-apphost-pack-7.0-7.0.15-1.el8_9.ML.1.x86_64.rpm
    MD5: 0ae1eabedccfb3831efe7687c2f81fc3
    SHA-256: 176511e67d4ad15dfcc8ffd9125eb04f451b33d56500bfc9b94d6c681d586986
    Size: 3.97 MB
  4. dotnet-hostfxr-7.0-7.0.15-1.el8_9.ML.1.x86_64.rpm
    MD5: 650872e0d2804fe7db417519adc7cf65
    SHA-256: 2fc492e8b4bfe80d529eb42feb33bd068fb62fb29539db663a9545e41556384c
    Size: 176.85 kB
  5. dotnet-runtime-7.0-7.0.15-1.el8_9.ML.1.x86_64.rpm
    MD5: bcd3dc763e8a1122945aa6c65a7ca80b
    SHA-256: ca593487174f36ada47b3a9ffc8bc33d99d957fdf12c615d436b4505af7607f8
    Size: 24.12 MB
  6. dotnet-sdk-7.0-7.0.115-1.el8_9.ML.1.x86_64.rpm
    MD5: 8758283b4b5212aad4333bc91abe084a
    SHA-256: 3313aeeb4611614c086b869226d0a8fed75107b29c1674f9339122b0f4a6ca87
    Size: 87.57 MB
  7. dotnet-sdk-7.0-source-built-artifacts-7.0.115-1.el8_9.ML.1.x86_64.rpm
    MD5: ad561f5eb0aab755ecf2b65839679760
    SHA-256: 84a30d32f91c032390ff691a2cde585a3a6ac683cd46fa49b4cd85da4be2c702
    Size: 888.84 MB
  8. dotnet-targeting-pack-7.0-7.0.15-1.el8_9.ML.1.x86_64.rpm
    MD5: 1d8d2bbaa6872b3a2c9cbae310293b43
    SHA-256: 0928451da021b4363a5dae6c2bd087b515b4ee9e6949644c25979cfdfe364df2
    Size: 2.86 MB
  9. dotnet-templates-7.0-7.0.115-1.el8_9.ML.1.x86_64.rpm
    MD5: 7d69965fb03d62a1923987e2e4630295
    SHA-256: 33de5678a693d1e55984d1adb8107fb59e1cc2157bba0287a8fb9072594a5502
    Size: 3.04 MB