High ALAS2023-2023-302 1 CVE

Important: dotnet6.0 security update (Amazon Linux 2023)

Published Aug 17, 2023 · Updated Aug 23, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-33170: ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Fixed packages 19

Release	Package	Fixed in
Amazon Linux · 2023	aspnetcore-runtime-6.0	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	aspnetcore-targeting-pack-6.0	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet	0:6.0.120-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-apphost-pack-6.0	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-apphost-pack-6.0-debuginfo	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-host	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-host-debuginfo	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-hostfxr-6.0	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-hostfxr-6.0-debuginfo	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-runtime-6.0	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-runtime-6.0-debuginfo	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-sdk-6.0	0:6.0.120-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-sdk-6.0-debuginfo	0:6.0.120-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-sdk-6.0-source-built-artifacts	0:6.0.120-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-targeting-pack-6.0	0:6.0.20-1.amzn2023.0.1
Amazon Linux · 2023	dotnet-templates-6.0	0:6.0.120-1.amzn2023.0.1
Amazon Linux · 2023	dotnet6.0-debuginfo	0:6.0.120-1.amzn2023.0.1
Amazon Linux · 2023	dotnet6.0-debugsource	0:6.0.120-1.amzn2023.0.1
Amazon Linux · 2023	netstandard-targeting-pack-2.1	0:6.0.120-1.amzn2023.0.1

Vulnerabilities 1

High 8.1

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Ubuntu Alpine NuGet

Jul 11, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-33170.html