dotnet3.1-3.1.108-2.0.1.el8
エラータID: AXSA:2020-740:02
リリース日:
2020/10/15 Thursday - 11:55
題名:
dotnet3.1-3.1.108-2.0.1.el8
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Microsoft ASP.NET Core には、「Microsoft ASP.NET Core Security
Feature Bypass Vulnerability」としても知られる、悪意のある攻撃者が
巧妙に細工された Cookie の文字列を介して、セキュリティ機能を
バイパスすることの可能な脆弱性があります。(CVE-2020-1045)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2020-1045
A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'.
A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'.
追加情報:
N/A
ダウンロード:
SRPMS
- dotnet3.1-3.1.108-2.0.1.el8.src.rpm
MD5: 867b4ac1fb816d7b2feabadf64606575
SHA-256: 32b247c22a296412311b7f2caa25468669958f7b73b296c40d7db1d991ecb4f3
Size: 2.32 GB
Asianux Server 8 for x86_64
- aspnetcore-runtime-3.1-3.1.8-2.0.1.el8.x86_64.rpm
MD5: 4006ec0aad93b8fd521873a79d214633
SHA-256: fee0bbfd593094c883cb0bcc2edeaf4709a9860a2200eb2dd74ad78628cda984
Size: 6.15 MB - aspnetcore-targeting-pack-3.1-3.1.8-2.0.1.el8.x86_64.rpm
MD5: df7b122329007026675031844f83c472
SHA-256: 84de02cebf1de19943ea04acf0603e0cc038a95f2e68925c6ea2c3d9c2a725e2
Size: 0.99 MB - dotnet-3.1.108-2.0.1.el8.x86_64.rpm
MD5: e264afcc39e32b04b2d9aec086976cf6
SHA-256: 5624bf4b5b458d00bacc389c011467ee5d75254ac107a0f619973ffda7e807da
Size: 14.67 kB - dotnet-apphost-pack-3.1-3.1.8-2.0.1.el8.x86_64.rpm
MD5: d1c1b71e732556f7843889b3a04a6150
SHA-256: 458ad6e396c2a24010e1bbe7a5b66553fcf89fd6d0ed19edfd6a9e5cdb30b34f
Size: 70.43 kB - dotnet-host-3.1.8-2.0.1.el8.x86_64.rpm
MD5: 429e31f42722cd5be9b3a4f70d0702d4
SHA-256: fcdf80800e194368b5ac148154ca8670bd12fdd5c7ad9a7004e8f68c4ba481ef
Size: 105.65 kB - dotnet-hostfxr-3.1-3.1.8-2.0.1.el8.x86_64.rpm
MD5: 0cf0d814d518458e88871906dba17a43
SHA-256: 7efce8abf140cbda3521229e2b8f1b45c86ddd0dc74ed241620fe6177fdb6347
Size: 160.68 kB - dotnet-runtime-3.1-3.1.8-2.0.1.el8.x86_64.rpm
MD5: f7d561b8d0c3b7485aef6f7d422c3a2f
SHA-256: c89eafecfb2a4cb11b3ebb1642d719235508bf968064c8fedfb9ba401d492230
Size: 26.71 MB - dotnet-sdk-3.1-3.1.108-2.0.1.el8.x86_64.rpm
MD5: 1ca232dc39adb0491a3c463632951d2c
SHA-256: 903240733413629975c03e2c1947839efcd2f16099c20719546c1cab26e11679
Size: 39.87 MB - dotnet-targeting-pack-3.1-3.1.8-2.0.1.el8.x86_64.rpm
MD5: a98f652835ee8ebf95f569b493ceb09f
SHA-256: 67fcabb7de56abecbb0869958595a623c3664e4a84227512fcbb499274a97430
Size: 2.02 MB - dotnet-templates-3.1-3.1.108-2.0.1.el8.x86_64.rpm
MD5: bd9455a985537c111cfbd73f23b4f2da
SHA-256: 3678bb8047efffd68f6ad07186b9b1f6bcda6601870314e94d9eb61f2cf6f70a
Size: 1.81 MB - netstandard-targeting-pack-2.1-3.1.108-2.0.1.el8.x86_64.rpm
MD5: 55c2af24d827faa6f5044a20d6fc0276
SHA-256: ab396b9a97a2676e282dbce3daf48f53eb1cd8028937a12bc2d63214b9d6e555
Size: 1.51 MB
English