dotnet6.0-6.0.126-1.el8_9.ML.1

エラータID: AXSA:2024-7411:02

Release date: 
Wednesday, January 17, 2024 - 09:13
Subject: 
dotnet6.0-6.0.126-1.el8_9.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.

New versions of .NET that address a security vulnerability are now available.
The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.

Security Fix(es):

dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient
(SDS) (CVE-2024-0056)
dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2024-21319
Microsoft Identity Denial of service vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2024-21319
Microsoft Identity Denial of service vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet6.0-6.0.126-1.el8_9.ML.1.src.rpm
    MD5: 611cb590d659529cf9898ea39ab2b76e
    SHA-256: 21b1d1a461540afdc8e83d288477b0baf1b8f82cad2a4774c3fde36557b17701
    Size: 510.03 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-6.0-6.0.26-1.el8_9.ML.1.x86_64.rpm
    MD5: 93972bb8f1ecb5e69f6d298558b6c367
    SHA-256: 829915bd8a3ff70cc2c57771a70d8c0a234333ebbbbdba3556ce06dba24d05ac
    Size: 6.94 MB
  2. aspnetcore-targeting-pack-6.0-6.0.26-1.el8_9.ML.1.x86_64.rpm
    MD5: 033fbbff89be94b4005017ccdf2ac1de
    SHA-256: 9b95b357ba545c653e305ed09038ea9c3bb21802764525952d476d40e338d18b
    Size: 1.49 MB
  3. dotnet-apphost-pack-6.0-6.0.26-1.el8_9.ML.1.x86_64.rpm
    MD5: 27b411ee9ffbfcf23db0d7adec865267
    SHA-256: 6ed424ba464d0832b528075d413e6866aec06fc27c53b0cc3bc4442d3e60ff69
    Size: 3.95 MB
  4. dotnet-hostfxr-6.0-6.0.26-1.el8_9.ML.1.x86_64.rpm
    MD5: 74f228130f9f42b6063c8c58ce454f1b
    SHA-256: 577fa4be718f0adc988ab2a64482e917458c1fe47c2a063ce77f03c38b1a1087
    Size: 175.44 kB
  5. dotnet-runtime-6.0-6.0.26-1.el8_9.ML.1.x86_64.rpm
    MD5: 523545b4fe819ff2280c3e4370df7888
    SHA-256: 16ce1587ec2b81392995e5b95a1b867f18608421dfd3b56d2c980cdf54cc92b5
    Size: 23.40 MB
  6. dotnet-sdk-6.0-6.0.126-1.el8_9.ML.1.x86_64.rpm
    MD5: 4d8ec703e5bf52b31eddba8540f8db52
    SHA-256: 3be5e69a13f78583244404f199fc88893379c4cc9a6669c56879db039ac14f7d
    Size: 78.01 MB
  7. dotnet-sdk-6.0-source-built-artifacts-6.0.126-1.el8_9.ML.1.x86_64.rpm
    MD5: 99df6c1ba785f6e5308eaa96a9b77cf9
    SHA-256: 8d38eb62c13fa7e75bf14eeb3b6370ac46b56268d55b861bb6c2b680d87f6e9f
    Size: 2.68 GB
  8. dotnet-targeting-pack-6.0-6.0.26-1.el8_9.ML.1.x86_64.rpm
    MD5: 37a31a9adfdebb2c270318d4519aa009
    SHA-256: c5c7d2529af662b0ecc3b436adc612c58a73519f75110190d0c687b2f99d47f3
    Size: 2.38 MB
  9. dotnet-templates-6.0-6.0.126-1.el8_9.ML.1.x86_64.rpm
    MD5: e28259b2ace4c6c05a21ae0b2f9ead6d
    SHA-256: c9359e22bdebbe6fac7a64ed5a8141ffcff1ba9b70a5129382d7a0ddf41c78f7
    Size: 2.77 MB