Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2023-5749

Опубликовано: 18 окт. 2023
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2023-5749: .NET 7.0 security update (IMPORTANT)

[7.0.112-1.0.1]

  • Update to .NET SDK 7.0.112 and Runtime 7.0.12
  • Resolves: RHEL-11698

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

aspnetcore-runtime-7.0

7.0.12-1.0.1.el9_2

aspnetcore-targeting-pack-7.0

7.0.12-1.0.1.el9_2

dotnet-apphost-pack-7.0

7.0.12-1.0.1.el9_2

dotnet-host

7.0.12-1.0.1.el9_2

dotnet-hostfxr-7.0

7.0.12-1.0.1.el9_2

dotnet-runtime-7.0

7.0.12-1.0.1.el9_2

dotnet-sdk-7.0

7.0.112-1.0.1.el9_2

dotnet-sdk-7.0-source-built-artifacts

7.0.112-1.0.1.el9_2

dotnet-targeting-pack-7.0

7.0.12-1.0.1.el9_2

dotnet-templates-7.0

7.0.112-1.0.1.el9_2

netstandard-targeting-pack-2.1

7.0.112-1.0.1.el9_2

Oracle Linux x86_64

aspnetcore-runtime-7.0

7.0.12-1.0.1.el9_2

aspnetcore-targeting-pack-7.0

7.0.12-1.0.1.el9_2

dotnet-apphost-pack-7.0

7.0.12-1.0.1.el9_2

dotnet-host

7.0.12-1.0.1.el9_2

dotnet-hostfxr-7.0

7.0.12-1.0.1.el9_2

dotnet-runtime-7.0

7.0.12-1.0.1.el9_2

dotnet-sdk-7.0

7.0.112-1.0.1.el9_2

dotnet-sdk-7.0-source-built-artifacts

7.0.112-1.0.1.el9_2

dotnet-targeting-pack-7.0

7.0.12-1.0.1.el9_2

dotnet-templates-7.0

7.0.112-1.0.1.el9_2

netstandard-targeting-pack-2.1

7.0.112-1.0.1.el9_2

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS3: 7.5
redhat
больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS3: 7.5
nvd
больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

msrc
больше 1 года назад

MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack

CVSS3: 7.5
debian
больше 1 года назад

The HTTP/2 protocol allows a denial of service (server resource consum ...