-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: .NET 6.0 on RHEL 7 security and bugfix update
Advisory ID: RHSA-2022:6915-01
Product: .NET Core on Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:6915
Issue date: 2022-10-12
CVE Names: CVE-2022-41032 ===================================================================== 1. Summary: An update for .NET 6.0 is available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact
of Low. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section. 2. Relevant releases/architectures: .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64
.NET Core on Red Hat Enterprise Linux Server (v. 7) - x86_64
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: .NET is a managed-software framework. It implements a subset of the .NET
framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now
available. The updated versions are .NET SDK 6.0.110 and .NET Runtime
6.0.10. Security Fix(es): * dotnet: Nuget cache poisoning on Linux via world-writable cache directory
(CVE-2022-41032) For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes
described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2132614 - CVE-2022-41032 dotnet: Nuget cache poisoning on Linux via world-writable cache directory 6. Package List: .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7): Source:
rh-dotnet60-dotnet-6.0.110-1.el7_9.src.rpm x86_64:
rh-dotnet60-aspnetcore-runtime-6.0-6.0.10-1.el7_9.x86_64.rpm
rh-dotnet60-aspnetcore-targeting-pack-6.0 ..
Support the originator by clicking the read the rest link below.
