[ALSA-2023:4058] Important: .NET 7.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2023-07-14
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219633) Security Fix(es): * dotnet: race condition in Core SignInManager PasswordSignInAsync method (CVE-2023-33170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-7.0-7.0.9-1.el8_8.aarch64.rpm 2708407fc4722261852552e8d8d5e6a48b6bae322b2efe593d993fd539bcb4a3
aarch64 aspnetcore-runtime-7.0-7.0.9-1.el8_8.aarch64.rpm 3a13951301000977c040921015bad71acd3599fb40ef5fc00d3e8be8dfbb908c
aarch64 dotnet-hostfxr-7.0-7.0.9-1.el8_8.aarch64.rpm 3b35f96975f9a6d9e3d828ce760cfc01fe5d05da9b38a9a4d68630f4f25973a6
aarch64 dotnet-apphost-pack-7.0-7.0.9-1.el8_8.aarch64.rpm 57367e99e0152fa4cbff64f882f84ceb327432f9e662c921acba1d181a49071e
aarch64 dotnet-host-7.0.9-1.el8_8.aarch64.rpm 6deb23f875115a8024f9a181c97cda1de907340c6b1fd1ff5b89e802032232fc
aarch64 dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el8_8.aarch64.rpm 75924653010124a7fe900487253f633592c82f72c1eaf2374b1ec3cbf285c24b
aarch64 dotnet-targeting-pack-7.0-7.0.9-1.el8_8.aarch64.rpm 8cada3d0e402260732c4420bbfa45e1a7efd75f84d7cfd8e64e51e11fb8acf36
aarch64 netstandard-targeting-pack-2.1-7.0.109-1.el8_8.aarch64.rpm a5253ed72e8edf6384067988568231291e77b859f2c0bb48a9d449bf9877657b
aarch64 dotnet-7.0.109-1.el8_8.aarch64.rpm a99c83ea3c8870be3670639d6a1859cfcf3affcac782f5aa164025bb4ef194c6
aarch64 dotnet-templates-7.0-7.0.109-1.el8_8.aarch64.rpm cbd2612f0b2794de71dae84743be4a258cc7578b3354d3fb7834d8aaf8fafc7b
aarch64 dotnet-sdk-7.0-7.0.109-1.el8_8.aarch64.rpm e61f7611f4855859cf9d42c3d98a48d47dee4758ca358c48cae924d076c6cc1e
aarch64 aspnetcore-targeting-pack-7.0-7.0.9-1.el8_8.aarch64.rpm e685ffc3819765e8dcdb2aed939e6b79bb057969ae5a755916515c0c327b3308
ppc64le dotnet-host-7.0.9-1.el8_8.ppc64le.rpm 051da15a47abd6cd1f7589d0e103ac0f0c00df754beadda0a2d19b560be98b10
ppc64le dotnet-7.0.109-1.el8_8.ppc64le.rpm 17d863b30dd26dc900cbb370e5dc1117e3b400f1ecddcae1c16b0616237d75c3
ppc64le dotnet-sdk-7.0-7.0.109-1.el8_8.ppc64le.rpm 19919e3ce67f19dc895310440624d705dd52c91bce95913209ed29f04bf4c6a9
ppc64le dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el8_8.ppc64le.rpm 1d250cb2fd0a4df211aa67810b778f99d0299aea7683f95df7bb696263601def
ppc64le aspnetcore-targeting-pack-7.0-7.0.9-1.el8_8.ppc64le.rpm 2112967cf6ae220630053b32a75fdf9564ec2c72969b0de92b2b42a536c81cd2
ppc64le dotnet-targeting-pack-7.0-7.0.9-1.el8_8.ppc64le.rpm 50a9f4c2864c7b3cc5f6d164030753ab1e3c4e7f3484896ebd84fe25a1bae87f
ppc64le dotnet-templates-7.0-7.0.109-1.el8_8.ppc64le.rpm 6c544826fca4d68feb0dfef43f229082e8b70bbab1f2cf7be8ad7c9545d52f55
ppc64le dotnet-hostfxr-7.0-7.0.9-1.el8_8.ppc64le.rpm 6c91e38d9e36c0b6fb3fbd0fd7fabe92514289a0ec853b90de293f4e6c19537e
ppc64le dotnet-apphost-pack-7.0-7.0.9-1.el8_8.ppc64le.rpm 6cee579036c10d679063f4bf22bb003bc205f134355ede1f5365bf1c7f6c0f63
ppc64le netstandard-targeting-pack-2.1-7.0.109-1.el8_8.ppc64le.rpm 77a9d856f1a6def3e342d6563b329e92229f69f41da851f5f2e428350e145c5d
ppc64le aspnetcore-runtime-7.0-7.0.9-1.el8_8.ppc64le.rpm 7eb8b7decc2f185d06721ab56dc28a653cc18670a9f87ee8008a794e5b691840
ppc64le dotnet-runtime-7.0-7.0.9-1.el8_8.ppc64le.rpm e35288b806951aeeba745436181189acdb2c774e05bb428f98d0e1e90d54356f
s390x dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el8_8.s390x.rpm 039516208b8fd746bf34bfb6e7ca92b10b700cdd848b93cabe78ac30e64dec17
s390x dotnet-runtime-7.0-7.0.9-1.el8_8.s390x.rpm 0f6afdffb42488fdc05efad310ab90976548192e4a937473e7bb0af9b44d661d
s390x netstandard-targeting-pack-2.1-7.0.109-1.el8_8.s390x.rpm 11abea518b7de582f28646c639cde04903aa60311e549709f9b4bcfeef1109fe
s390x dotnet-hostfxr-7.0-7.0.9-1.el8_8.s390x.rpm 15377dd21052265cbee4be1985e4c72b8c595a1fd8b1ed08669e16a2d49827ae
s390x aspnetcore-targeting-pack-7.0-7.0.9-1.el8_8.s390x.rpm 17fd31738721e41a1103cc2ac9db44490e5e823ba9b6e5de26133adb039b4a5b
s390x dotnet-apphost-pack-7.0-7.0.9-1.el8_8.s390x.rpm 5d80db5caf88710e0a1241b78ad2d33b1056e29bde046e4bf5e9d7ad14d269a5
s390x aspnetcore-runtime-7.0-7.0.9-1.el8_8.s390x.rpm 8f8c74e541c8fee735b3ef48a0d8a0e62e2de43cc4f1badfd07f1583d34beba5
s390x dotnet-templates-7.0-7.0.109-1.el8_8.s390x.rpm a1925a3a53b758faf03e32a28f754e449e77cd105768675d2fc05ae32e4841a4
s390x dotnet-sdk-7.0-7.0.109-1.el8_8.s390x.rpm afd9c86df807f170d3b213cce8af87bf89555bb86143adde66de259517395399
s390x dotnet-targeting-pack-7.0-7.0.9-1.el8_8.s390x.rpm b001e6b47bd3a84109f5f734156ef00f2084479a66f8d5eda2db6e75e2670b1b
s390x dotnet-host-7.0.9-1.el8_8.s390x.rpm d83435099ed81945683bb3dc99b385083fff80aa1f1cf7e3a486d0d0ecf1de08
s390x dotnet-7.0.109-1.el8_8.s390x.rpm f97be54040de1d1c459cec81a5645f15ae790188b3ffa0c4b398d7bfa9aa08ff
x86_64 aspnetcore-targeting-pack-7.0-7.0.9-1.el8_8.x86_64.rpm 0e9cce4e1f3a389b712a44039e1199557efcb34954a6a333abef47af215d0b4b
x86_64 dotnet-hostfxr-7.0-7.0.9-1.el8_8.x86_64.rpm 1c33bf32af16f1421ba5b7f95541ff454d9c4abe95c5d8315fe1459d145f8124
x86_64 dotnet-targeting-pack-7.0-7.0.9-1.el8_8.x86_64.rpm 3a07a5cccbd7051f14317867343532cc0651c09171a73e9cec685a4078771ac6
x86_64 dotnet-runtime-7.0-7.0.9-1.el8_8.x86_64.rpm 3e5bf67b8c434c1b979915c339c82ed9898353ec88cf747e4a098b2e7a3dad1e
x86_64 dotnet-7.0.109-1.el8_8.x86_64.rpm 4095b6e80901a8487e4d842b8ca60d6b08f5a123de2a3a765d5720a75b0bb471
x86_64 dotnet-templates-7.0-7.0.109-1.el8_8.x86_64.rpm 660317ef90971ed44655e9ec4b6aad663b9e941ae72fae5f0ea667005296988e
x86_64 aspnetcore-runtime-7.0-7.0.9-1.el8_8.x86_64.rpm 7a84b80e9e4db237f1f08dacd1bdd8fea0993fcacc744807a8dbca26d8a84cb7
x86_64 dotnet-sdk-7.0-7.0.109-1.el8_8.x86_64.rpm 97ecfeb9d726afbcd5af0a5df42eb9fa4c7d93c1cdbb222d78bc3ada0f96e404
x86_64 dotnet-host-7.0.9-1.el8_8.x86_64.rpm 995a444b0a0928319db25a31be438c7e3bdccd20a2d3261acd3b5fa1ce2f5fad
x86_64 dotnet-apphost-pack-7.0-7.0.9-1.el8_8.x86_64.rpm bdfeaae242618280802ea953c6068b3b117b89b144c3f94b083bf113ceabb3bd
x86_64 netstandard-targeting-pack-2.1-7.0.109-1.el8_8.x86_64.rpm be0e99e2417bd27381af5b5168f0150c44f3675b827c71a18dd739be0f1f89d0
x86_64 dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el8_8.x86_64.rpm dfb0915acab87d266e9b9648707701a6eb2be92ee2d9e6d331e5a29b20cc399f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.