Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2023:4643

Опубликовано: 06 окт. 2023
Источник: rocky
Оценка: Important

Описание

Important: .NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

  • dotnet: RCE under dotnet commands (CVE-2023-35390)

  • dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
aspnetcore-runtime-7.0x86_641.el8_8aspnetcore-runtime-7.0-7.0.10-1.el8_8.x86_64.rpm
aspnetcore-targeting-pack-7.0x86_641.el8_8aspnetcore-targeting-pack-7.0-7.0.10-1.el8_8.x86_64.rpm
dotnetx86_641.el8_8dotnet-7.0.110-1.el8_8.x86_64.rpm
dotnet-apphost-pack-7.0x86_641.el8_8dotnet-apphost-pack-7.0-7.0.10-1.el8_8.x86_64.rpm
dotnet-hostx86_641.el8_8dotnet-host-7.0.10-1.el8_8.x86_64.rpm
dotnet-hostfxr-7.0x86_641.el8_8dotnet-hostfxr-7.0-7.0.10-1.el8_8.x86_64.rpm
dotnet-runtime-7.0x86_641.el8_8dotnet-runtime-7.0-7.0.10-1.el8_8.x86_64.rpm
dotnet-sdk-7.0x86_641.el8_8dotnet-sdk-7.0-7.0.110-1.el8_8.x86_64.rpm
dotnet-targeting-pack-7.0x86_641.el8_8dotnet-targeting-pack-7.0-7.0.10-1.el8_8.x86_64.rpm
dotnet-templates-7.0x86_641.el8_8dotnet-templates-7.0-7.0.110-1.el8_8.x86_64.rpm

Показывать по

Связанные CVE

Связанные уязвимости

rocky
больше 1 года назад

Important: .NET 6.0 security, bug fix, and enhancement update

oracle-oval
почти 2 года назад

ELSA-2023-4645: .NET 6.0 security, bug fix, and enhancement update (IMPORTANT)

oracle-oval
почти 2 года назад

ELSA-2023-4644: .NET 6.0 security, bug fix, and enhancement update (IMPORTANT)

oracle-oval
почти 2 года назад

ELSA-2023-4643: .NET 7.0 security, bug fix, and enhancement update (IMPORTANT)

oracle-oval
почти 2 года назад

ELSA-2023-4642: .NET 7.0 security, bug fix, and enhancement update (IMPORTANT)