High ELSA-2023-3582 4 CVEs

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

Published Jun 16, 2023 · Updated Jun 16, 2023

Ecosystem: Oracle Linux

Summary

[6.0.118-1.0.1]
- Add missing Oracle Linux Runtime IDs

[6.0.118-1]
- Update to .NET SDK 6.0.118 and Runtime 6.0.18
- Resolves: RHBZ#2212378

[6.0.117-2]
- Update to .NET SDK 6.0.117 and Runtime 6.0.17
- Resolves: RHBZ#2190262

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 8	aspnetcore-runtime-6.0	0:6.0.18-1.0.1.el8_8
Oracle Linux · 8	aspnetcore-targeting-pack-6.0	0:6.0.18-1.0.1.el8_8
Oracle Linux · 8	dotnet-apphost-pack-6.0	0:6.0.18-1.0.1.el8_8
Oracle Linux · 8	dotnet-hostfxr-6.0	0:6.0.18-1.0.1.el8_8
Oracle Linux · 8	dotnet-runtime-6.0	0:6.0.18-1.0.1.el8_8
Oracle Linux · 8	dotnet-sdk-6.0	0:6.0.118-1.0.1.el8_8
Oracle Linux · 8	dotnet-sdk-6.0-source-built-artifacts	0:6.0.118-1.0.1.el8_8
Oracle Linux · 8	dotnet-targeting-pack-6.0	0:6.0.18-1.0.1.el8_8
Oracle Linux · 8	dotnet-templates-6.0	0:6.0.118-1.0.1.el8_8

Vulnerabilities 4

High 7.5

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine NuGet

Jun 14, 2023
High 7.5

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine NuGet

Jun 14, 2023
High 7.3

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Ubuntu Alpine NuGet

Jun 13, 2023
High 7.1

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

NuGet Client Remote Code Execution Vulnerability

Microsoft NuGet 6.2.3 NuGet 6.5.0 NuGet 6.0.4 Debian Ubuntu Alpine NuGet

Jun 14, 2023