dotnet7.0-7.0.119-1.el9_4.ML.1

エラータID: AXSA:2024-8152:10

Release date: 
Friday, June 14, 2024 - 16:55
Subject: 
dotnet7.0-7.0.119-1.el9_4.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30046
Visual Studio Denial of Service Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30046
Visual Studio Denial of Service Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.119-1.el9_4.ML.1.src.rpm
    MD5: 7c4a0833f9a2d8ce227c8bc33bd0eb0a
    SHA-256: 5de8bfdd4b799d98839b471da101e29cae677d6526d6f1682c31e2fc8c602a52
    Size: 494.08 MB

Asianux Server 9 for x86_64
  1. aspnetcore-runtime-7.0-7.0.19-1.el9_4.ML.1.x86_64.rpm
    MD5: 8e42f8f8867f0f0486d2e1bae24220c1
    SHA-256: f7dc345ac10598a48f8b0a1a407ddb2177ee23ef26e1621ff3ec5e76e25a6587
    Size: 7.37 MB
  2. aspnetcore-targeting-pack-7.0-7.0.19-1.el9_4.ML.1.x86_64.rpm
    MD5: 01a76cf5e655f9579a436e168db062ac
    SHA-256: 04a1eeb84cee221a6ee6a81c04642448a1c0facfbf9ecd9b80fc8f3eaa699a34
    Size: 1.57 MB
  3. dotnet-apphost-pack-7.0-7.0.19-1.el9_4.ML.1.x86_64.rpm
    MD5: 02e4dcba162aa57651983a3454264476
    SHA-256: 887f7451502855a2fb4522d22ed2b927571a44bc7b40ee10fd6d1d88f5da8b98
    Size: 3.95 MB
  4. dotnet-hostfxr-7.0-7.0.19-1.el9_4.ML.1.x86_64.rpm
    MD5: e311dcfd5c0025f826ad623e9709c9f5
    SHA-256: a801567e9cd9fa2cbf976934d7137d5f2b27cb5e94ed159ea1e8b84743bc1867
    Size: 166.84 kB
  5. dotnet-runtime-7.0-7.0.19-1.el9_4.ML.1.x86_64.rpm
    MD5: a6497deb06a8eaa95e1a4dd3e65029a7
    SHA-256: 11c327be2085793d3f3f1ac64443ebb7fa724830d8383d6eb1d9b8427f18cd63
    Size: 23.78 MB
  6. dotnet-sdk-7.0-7.0.119-1.el9_4.ML.1.x86_64.rpm
    MD5: 2372f1780943fa86edccd99e26374540
    SHA-256: f891cc0b7cd3e97d301e4a043d3d397c1b2c6786d47b6d7d39f4de83cc08b405
    Size: 85.44 MB
  7. dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el9_4.ML.1.x86_64.rpm
    MD5: e5ce1142fda25f3c7d5ee54a0f1ae749
    SHA-256: a9241c0766ae2ac9147bbf603acc1b7f5f5b89968f3c709b92b5151ea56584d4
    Size: 858.06 MB
  8. dotnet-targeting-pack-7.0-7.0.19-1.el9_4.ML.1.x86_64.rpm
    MD5: b019eff1abb7bc982c882d7fb79c0d8f
    SHA-256: 91ca121d18a10c3ee520a140fe2944ee6e1280da39012e464051edc9febf2a8b
    Size: 2.68 MB
  9. dotnet-templates-7.0-7.0.119-1.el9_4.ML.1.x86_64.rpm
    MD5: 914cafeb138068148403daa283affaa7
    SHA-256: 2e9b8c4e88982142c19df6a4b10da195303d4303d101c895333796b9ed02cbb3
    Size: 2.72 MB