Critical 1 exploited CVE ELSA-2020-2954 1 CVE

Critical: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

Published Jul 17, 2020 · Updated Jul 17, 2020

Ecosystem: Oracle Linux

Summary

[3.1.106-1.0.1]
- Update patch to support 8.2 (alexander.burmashev@oracle.com)
- support OL release scheme (alexander.burmashev@oracle.com)

[3.1.106-1]
- Update to .NET Core Runtime 3.1.6 and SDK 3.1.106
- Resolves: RHBZ#1854137

Fixed packages 11

Release	Package	Fixed in
Oracle Linux · 8	aspnetcore-runtime-3.1	0:3.1.6-1.0.1.el8_2
Oracle Linux · 8	aspnetcore-targeting-pack-3.1	0:3.1.6-1.0.1.el8_2
Oracle Linux · 8	dotnet	0:3.1.106-1.0.1.el8_2
Oracle Linux · 8	dotnet-apphost-pack-3.1	0:3.1.6-1.0.1.el8_2
Oracle Linux · 8	dotnet-host	0:3.1.6-1.0.1.el8_2
Oracle Linux · 8	dotnet-hostfxr-3.1	0:3.1.6-1.0.1.el8_2
Oracle Linux · 8	dotnet-runtime-3.1	0:3.1.6-1.0.1.el8_2
Oracle Linux · 8	dotnet-sdk-3.1	0:3.1.106-1.0.1.el8_2
Oracle Linux · 8	dotnet-targeting-pack-3.1	0:3.1.6-1.0.1.el8_2
Oracle Linux · 8	dotnet-templates-3.1	0:3.1.106-1.0.1.el8_2
Oracle Linux · 8	netstandard-targeting-pack-2.1	0:3.1.106-1.0.1.el8_2

Vulnerabilities 1

High 7.8

CVE-2020-1147 Exploited Public exploit EPSS 96%

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet

Jul 14, 2020
KEV Nov 3, 2021