Important: .NET 6.0 security, bug fix, and enhancement update

🗓️ 14 Jun 2023 00:00:00Reported by AlmaLinuxType

almalinux

almalinux🔗 errata.almalinux.org👁 37 Views

.NET 6.0 security update and bug fixe

Reporter	Title	Published	Views	Family All 288
IBM Security Bulletins	Security Bulletin: A security vulnerability in Microsoft.NET affects IBM Robotic Process Automation and may result in a denial of service (CVE-2023-29331).	21 Aug 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in .NET may affect IBM Robotic Process Automation for Cloud Pak (CVE-2023-24936, CVE-2023-29337, CVE-2023-33128)	22 Aug 202303:25	–	ibm
ATTACKERKB	CVE-2023-33128	14 Jun 202300:15	–	attackerkb
ATTACKERKB	CVE-2023-29337	14 Jun 202315:15	–	attackerkb
ATTACKERKB	CVE-2023-24936	14 Jun 202315:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-242)	20 Jul 202300:00	–	nessus
Tenable Nessus	MiracleLinux 9 : dotnet7.0-7.0.107-1.el9.ML.1 (AXSA:2023-6092:17)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : dotnet6.0-6.0.118-1.el9.ML.1 (AXSA:2023-6098:13)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : dotnet7.0-7.0.107-1.el8.ML.1 (AXSA:2023-6203:20)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : dotnet6.0-6.0.118-1.el8.ML.1 (AXSA:2023-6205:16)	20 Jan 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	9	aarch64	dotnet-runtime-6.0	6.0.18-1.el9_2	dotnet-runtime-6.0-6.0.18-1.el9_2.aarch64.rpm
almalinux	9	aarch64	dotnet-targeting-pack-6.0	6.0.18-1.el9_2	dotnet-targeting-pack-6.0-6.0.18-1.el9_2.aarch64.rpm
almalinux	9	aarch64	dotnet-sdk-6.0	6.0.118-1.el9_2	dotnet-sdk-6.0-6.0.118-1.el9_2.aarch64.rpm
almalinux	9	aarch64	aspnetcore-runtime-6.0	6.0.18-1.el9_2	aspnetcore-runtime-6.0-6.0.18-1.el9_2.aarch64.rpm
almalinux	9	aarch64	dotnet-hostfxr-6.0	6.0.18-1.el9_2	dotnet-hostfxr-6.0-6.0.18-1.el9_2.aarch64.rpm
almalinux	9	aarch64	aspnetcore-targeting-pack-6.0	6.0.18-1.el9_2	aspnetcore-targeting-pack-6.0-6.0.18-1.el9_2.aarch64.rpm
almalinux	9	aarch64	dotnet-templates-6.0	6.0.118-1.el9_2	dotnet-templates-6.0-6.0.118-1.el9_2.aarch64.rpm
almalinux	9	aarch64	dotnet-apphost-pack-6.0	6.0.18-1.el9_2	dotnet-apphost-pack-6.0-6.0.18-1.el9_2.aarch64.rpm
almalinux	9	x86_64	dotnet-targeting-pack-6.0	6.0.18-1.el9_2	dotnet-targeting-pack-6.0-6.0.18-1.el9_2.x86_64.rpm
almalinux	9	x86_64	dotnet-apphost-pack-6.0	6.0.18-1.el9_2	dotnet-apphost-pack-6.0-6.0.18-1.el9_2.x86_64.rpm

Source	Link
access	www.access.redhat.com/errata/RHSA-2023:3581
access	www.access.redhat.com/security/cve/CVE-2023-24936
access	www.access.redhat.com/security/cve/CVE-2023-29331
access	www.access.redhat.com/security/cve/CVE-2023-29337
access	www.access.redhat.com/security/cve/CVE-2023-33128
bugzilla	www.bugzilla.redhat.com/2192438
bugzilla	www.bugzilla.redhat.com/2212617
bugzilla	www.bugzilla.redhat.com/2212618
bugzilla	www.bugzilla.redhat.com/2213703
errata	www.errata.almalinux.org/9/ALSA-2023-3581.html

23 Jun 2023 19:17Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

EPSS0.02627

SSVC

.net security update bug fixes cve-2023-29331 cve-2023-29337 cve-2023-33128 symlink attack dataset datatable remote code execution