Skip to content
OpenAdvisories
Medium ALAS2023-2023-457 2 CVEs

Moderate: dotnet6.0 security update (Amazon Linux 2023)

Published Dec 6, 2023 · Updated Dec 14, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-36558: ASP.NET Core - Security Feature Bypass Vulnerability CVE-2023-36049: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Fixed packages 19

ReleasePackageFixed in
Amazon Linux · 2023 aspnetcore-runtime-6.0 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 aspnetcore-targeting-pack-6.0 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet 0:6.0.125-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-apphost-pack-6.0 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-apphost-pack-6.0-debuginfo 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-host 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-host-debuginfo 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-hostfxr-6.0 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-hostfxr-6.0-debuginfo 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-runtime-6.0 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-runtime-6.0-debuginfo 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0 0:6.0.125-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0-debuginfo 0:6.0.125-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0-source-built-artifacts 0:6.0.125-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-targeting-pack-6.0 0:6.0.25-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-templates-6.0 0:6.0.125-1.amzn2023.0.1
Amazon Linux · 2023 dotnet6.0-debuginfo 0:6.0.125-1.amzn2023.0.1
Amazon Linux · 2023 dotnet6.0-debugsource 0:6.0.125-1.amzn2023.0.1
Amazon Linux · 2023 netstandard-targeting-pack-2.1 0:6.0.125-1.amzn2023.0.1

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-36049.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-36558.html