Skip to content
OpenAdvisories
High 1 exploited CVE ALAS2023-2023-389 1 CVE

Important: dotnet6.0 security update (Amazon Linux 2023)

Published Oct 16, 2023 · Updated Oct 18, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-44487: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Fixed packages 19

ReleasePackageFixed in
Amazon Linux · 2023 aspnetcore-runtime-6.0 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 aspnetcore-targeting-pack-6.0 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet 0:6.0.123-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-apphost-pack-6.0 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-apphost-pack-6.0-debuginfo 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-host 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-host-debuginfo 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-hostfxr-6.0 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-hostfxr-6.0-debuginfo 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-runtime-6.0 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-runtime-6.0-debuginfo 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0 0:6.0.123-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0-debuginfo 0:6.0.123-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0-source-built-artifacts 0:6.0.123-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-targeting-pack-6.0 0:6.0.23-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-templates-6.0 0:6.0.123-1.amzn2023.0.1
Amazon Linux · 2023 dotnet6.0-debuginfo 0:6.0.123-1.amzn2023.0.1
Amazon Linux · 2023 dotnet6.0-debugsource 0:6.0.123-1.amzn2023.0.1
Amazon Linux · 2023 netstandard-targeting-pack-2.1 0:6.0.123-1.amzn2023.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-44487.html