USN-6362-1: .NET vulnerability
12 September 2023
.NET could be made to crash if it received a specially crafted request.
Releases
Packages
Details
Kevin Jones discovered that .NET did not properly process certain
X.509 certificates. An attacker could possibly use this issue to
cause a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.04
-
aspnetcore-runtime-6.0
-
6.0.122-0ubuntu1~23.04.1
-
aspnetcore-runtime-7.0
-
7.0.111-0ubuntu1~23.04.1
-
dotnet-host
-
6.0.122-0ubuntu1~23.04.1
-
dotnet-host-7.0
-
7.0.111-0ubuntu1~23.04.1
-
dotnet-hostfxr-6.0
-
6.0.122-0ubuntu1~23.04.1
-
dotnet-hostfxr-7.0
-
7.0.111-0ubuntu1~23.04.1
-
dotnet-runtime-6.0
-
6.0.122-0ubuntu1~23.04.1
-
dotnet-runtime-7.0
-
7.0.111-0ubuntu1~23.04.1
-
dotnet-sdk-6.0
-
6.0.122-0ubuntu1~23.04.1
-
dotnet-sdk-7.0
-
7.0.111-0ubuntu1~23.04.1
-
dotnet6
-
6.0.122-0ubuntu1~23.04.1
-
dotnet7
-
7.0.111-0ubuntu1~23.04.1
Ubuntu 22.04
-
aspnetcore-runtime-6.0
-
6.0.122-0ubuntu1~22.04.1
-
aspnetcore-runtime-7.0
-
7.0.111-0ubuntu1~22.04.1
-
dotnet-host
-
6.0.122-0ubuntu1~22.04.1
-
dotnet-host-7.0
-
7.0.111-0ubuntu1~22.04.1
-
dotnet-hostfxr-6.0
-
6.0.122-0ubuntu1~22.04.1
-
dotnet-hostfxr-7.0
-
7.0.111-0ubuntu1~22.04.1
-
dotnet-runtime-6.0
-
6.0.122-0ubuntu1~22.04.1
-
dotnet-runtime-7.0
-
7.0.111-0ubuntu1~22.04.1
-
dotnet-sdk-6.0
-
6.0.122-0ubuntu1~22.04.1
-
dotnet-sdk-7.0
-
7.0.111-0ubuntu1~22.04.1
-
dotnet6
-
6.0.122-0ubuntu1~22.04.1
-
dotnet7
-
7.0.111-0ubuntu1~22.04.1
In general, a standard system update will make all the necessary changes.