ELSA-2023-3593 — Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

Summary

[7.0.107-1.0.1]
- Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]

[7.0.107-1]
- Update to .NET SDK 7.0.107 and Runtime 7.0.7
- Resolves: RHBZ#2211876

[7.0.106-2]
- Update to .NET SDK 7.0.106 and Runtime 7.0.6
- Resolves: RHBZ#2190267

Fixed packages 12

Release	Package	Fixed in
Oracle Linux · 8	aspnetcore-runtime-7.0	0:7.0.7-1.0.1.el8_8
Oracle Linux · 8	aspnetcore-targeting-pack-7.0	0:7.0.7-1.0.1.el8_8
Oracle Linux · 8	dotnet	0:7.0.107-1.0.1.el8_8
Oracle Linux · 8	dotnet-apphost-pack-7.0	0:7.0.7-1.0.1.el8_8
Oracle Linux · 8	dotnet-host	0:7.0.7-1.0.1.el8_8
Oracle Linux · 8	dotnet-hostfxr-7.0	0:7.0.7-1.0.1.el8_8
Oracle Linux · 8	dotnet-runtime-7.0	0:7.0.7-1.0.1.el8_8
Oracle Linux · 8	dotnet-sdk-7.0	0:7.0.107-1.0.1.el8_8
Oracle Linux · 8	dotnet-sdk-7.0-source-built-artifacts	0:7.0.107-1.0.1.el8_8
Oracle Linux · 8	dotnet-targeting-pack-7.0	0:7.0.7-1.0.1.el8_8
Oracle Linux · 8	dotnet-templates-7.0	0:7.0.107-1.0.1.el8_8
Oracle Linux · 8	netstandard-targeting-pack-2.1	0:7.0.107-1.0.1.el8_8

Vulnerabilities 5

High 7.5

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine NuGet

Jun 14, 2023
High 7.5

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine NuGet

Jun 14, 2023
High 7.3

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Ubuntu Alpine NuGet

Jun 13, 2023
High 7.1

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

NuGet Client Remote Code Execution Vulnerability

Microsoft NuGet 6.2.3 NuGet 6.5.0 NuGet 6.0.4 Debian Ubuntu Alpine NuGet

Jun 14, 2023
Medium 6.5

CVE-2023-32032

.NET and Visual Studio Elevation of Privilege Vulnerability

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 Ubuntu Alpine

Jun 13, 2023

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

Summary

Fixed packages 12

Vulnerabilities 5

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

NuGet Client Remote Code Execution Vulnerability

.NET and Visual Studio Elevation of Privilege Vulnerability