dotnet7.0-7.0.115-1.el9_3.ML.1

エラータID: AXSA:2024-7412:03

Release date: 
Wednesday, January 17, 2024 - 09:25
Subject: 
dotnet7.0-7.0.115-1.el9_3.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.

New versions of .NET that address a security vulnerability are now available.
The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient
(SDS) (CVE-2024-0056)
dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2024-21319
Microsoft Identity Denial of service vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2024-21319
Microsoft Identity Denial of service vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.115-1.el9_3.ML.1.src.rpm
    MD5: 70f2bc614c21e9e12e7817111da06525
    SHA-256: 43b8ee5fbcd84cac4650950ebac77ef02d712b02018bce054eb623ab7b0dc2da
    Size: 494.04 MB

Asianux Server 9 for x86_64
  1. aspnetcore-runtime-7.0-7.0.15-1.el9_3.ML.1.x86_64.rpm
    MD5: 0bc5456a7b0621f6eb38e87dbac93ab9
    SHA-256: 6fe27f0ef29e821b1950a5fb3cb68dfd11ed4f226940e0dae2cffaf80992c5ad
    Size: 7.33 MB
  2. aspnetcore-targeting-pack-7.0-7.0.15-1.el9_3.ML.1.x86_64.rpm
    MD5: ca617853eb3ba33422b4ba518d9ae3b8
    SHA-256: 52f32281be89fa76937a253366653fab71425680073832be77102a2bc3c332f0
    Size: 1.51 MB
  3. dotnet-apphost-pack-7.0-7.0.15-1.el9_3.ML.1.x86_64.rpm
    MD5: 830f99f78b25eda2f9c187e44fdfe416
    SHA-256: f9334aecb7f0f31cedea306cfa4f8603852114ed224a122668ffeb9a12d687af
    Size: 3.95 MB
  4. dotnet-hostfxr-7.0-7.0.15-1.el9_3.ML.1.x86_64.rpm
    MD5: 703959abde918555cf33b236247488ae
    SHA-256: 7885fed96ea302fca535ff75289a6ed06551f1656c00f0dd2d3f321c6da45bf2
    Size: 166.91 kB
  5. dotnet-runtime-7.0-7.0.15-1.el9_3.ML.1.x86_64.rpm
    MD5: 283aafb9aa2916c7a8c67135717bad0a
    SHA-256: ab2460c318e629414f5eac6de0315a3759cc82e5751da23f9ed031e7dbf8f692
    Size: 23.73 MB
  6. dotnet-sdk-7.0-7.0.115-1.el9_3.ML.1.x86_64.rpm
    MD5: 8e302d4b16cc05de754ee9a2690a6162
    SHA-256: aa279332369d06c7013ad895210f9ef79a402788f306fcb44e16ce9af821b060
    Size: 85.02 MB
  7. dotnet-sdk-7.0-source-built-artifacts-7.0.115-1.el9_3.ML.1.x86_64.rpm
    MD5: 252c727e90cf7adffb6f6a6676a2ed54
    SHA-256: 71af54e33fb0549721d5c8dcbb46c0b7e755dd7dc915913b36e27e05431e236a
    Size: 811.06 MB
  8. dotnet-targeting-pack-7.0-7.0.15-1.el9_3.ML.1.x86_64.rpm
    MD5: ba2651cf4002fb6e0d6d9797974e2470
    SHA-256: 9ffbb9e0615a2ccabf91f10174a34e2b332a1438e7f59a419c649b2b7b00e2a2
    Size: 2.60 MB
  9. dotnet-templates-7.0-7.0.115-1.el9_3.ML.1.x86_64.rpm
    MD5: cd68f571f378c699a616e4fe8f26443b
    SHA-256: 14d67d0a8c25832a71bba861102f4528d6e073a4a28695e18615cc6c4f484ed4
    Size: 2.73 MB