dotnet7.0-7.0.119-1.el8.ML.1

エラータID: AXSA:2024-8381:11

Release date: 
Tuesday, June 18, 2024 - 21:22
Subject: 
dotnet7.0-7.0.119-1.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30046
Visual Studio Denial of Service Vulnerability

Solution: 

Update packages.

CVEs: 
CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30046
Visual Studio Denial of Service Vulnerability
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet7.0-7.0.119-1.el8.ML.1.src.rpm
    MD5: 9a2310fffedb5724324cdb9e8237b182
    SHA-256: 6074541a75865610c5e5da06423409a0600863531ac5f7a75a3295a3223cc6eb
    Size: 494.08 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-7.0-7.0.19-1.el8.ML.1.x86_64.rpm
    MD5: b163db9f576d4ed9330c1210b972efbd
    SHA-256: fe037ad1df26366e4ed6a5d2cb52f258c0a95e737ae446c9043f727935b9e4f1
    Size: 7.41 MB
  2. aspnetcore-targeting-pack-7.0-7.0.19-1.el8.ML.1.x86_64.rpm
    MD5: b57c0482c851254411318b63ef655db4
    SHA-256: ac5c333660b4906fca6091171652e0d30f4e21d2f9e3e7b50892dc8e2d6c217b
    Size: 1.61 MB
  3. dotnet-apphost-pack-7.0-7.0.19-1.el8.ML.1.x86_64.rpm
    MD5: 4adba4b51dab09a00207fd2d13e924fe
    SHA-256: 6e2a31e4c72cd82f3f6776ec08f75a7c790d3d1b5030447e7d44319692fedf24
    Size: 3.97 MB
  4. dotnet-hostfxr-7.0-7.0.19-1.el8.ML.1.x86_64.rpm
    MD5: 7b8fa8dcf6e10b06e131f9173c5a1fea
    SHA-256: 650ee8a3551b37b108a9fe2a812ca0589e7137de035c868edefa5407dfad4a71
    Size: 177.09 kB
  5. dotnet-runtime-7.0-7.0.19-1.el8.ML.1.x86_64.rpm
    MD5: 1e2db6d9dbd67846e7ec910b412d9d22
    SHA-256: 9f236a54374e555452aea6e5f3c89fa511463be4e90ae9ce17ba83e9f7bd5093
    Size: 24.13 MB
  6. dotnet-sdk-7.0-7.0.119-1.el8.ML.1.x86_64.rpm
    MD5: 9251f0b7068783155528b325c5c00de7
    SHA-256: f3016e9806373f3f3fe75d025aa69198544b0a77140bfb8e16e90e1e30cf22cc
    Size: 86.66 MB
  7. dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el8.ML.1.x86_64.rpm
    MD5: c3e374732ef64c3a1049bca284d67f3d
    SHA-256: 03f0465b411afe754e93dad5c07efbcd19f04387ddaa51bc3d56191de019579a
    Size: 934.56 MB
  8. dotnet-targeting-pack-7.0-7.0.19-1.el8.ML.1.x86_64.rpm
    MD5: 4073ecb7a4970226d8eb0ea0b925effb
    SHA-256: f4317b69715935d5eb95ec876af012fa29cd7214a474aefa3f5e2bf6d22d01bf
    Size: 2.86 MB
  9. dotnet-templates-7.0-7.0.119-1.el8.ML.1.x86_64.rpm
    MD5: b2af9d7236c9da137cee6f6b7e13aefe
    SHA-256: 6ef75fe03c821cf60e885a25156a9f75770248bd00d986906b1d9fd2887c0e64
    Size: 2.87 MB