ELSA-2020-2954

Опубликовано: 17 июл. 2020

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2020-2954: .NET Core 3.1 security and bugfix update (CRITICAL)

[3.1.106-1.0.1]

Update patch to support 8.2 (alexander.burmashev@oracle.com)
support OL release scheme (alexander.burmashev@oracle.com)

[3.1.106-1]

Update to .NET Core Runtime 3.1.6 and SDK 3.1.106
Resolves: RHBZ#1854137

Обновленные пакеты

Oracle Linux 8

Oracle Linux x86_64

aspnetcore-runtime-3.1

3.1.6-1.0.1.el8_2

aspnetcore-targeting-pack-3.1

3.1.6-1.0.1.el8_2

dotnet

3.1.106-1.0.1.el8_2

dotnet-apphost-pack-3.1

3.1.6-1.0.1.el8_2

dotnet-host

3.1.6-1.0.1.el8_2

dotnet-hostfxr-3.1

3.1.6-1.0.1.el8_2

dotnet-runtime-3.1

3.1.6-1.0.1.el8_2

dotnet-sdk-3.1

3.1.106-1.0.1.el8_2

dotnet-targeting-pack-3.1

3.1.6-1.0.1.el8_2

dotnet-templates-3.1

3.1.106-1.0.1.el8_2

netstandard-targeting-pack-2.1

3.1.106-1.0.1.el8_2

Связанные CVE

CVE-2020-1147

Ссылки на источники

Связанные уязвимости

CVE-2020-1147

CVSS3: 8.8

redhat

больше 5 лет назад

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.