---
title: 'USN-6362-2: .Net regressions | Ubuntu security notices'
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/notices/USN-6362-2
---

1. [Ubuntu Security Notices](https://ubuntu.com/security/notices)
2. USN-6362-2

---

# USN-6362-2: .Net regressions

Publication date

25 October 2023

Overview

An incomplete fix was discovered in .Net.

Releases

[23.04](https://ubuntu.com/security/notices?release=lunar)
[22.04 LTS](https://ubuntu.com/security/notices?release=jammy)

---

Open side navigation

## Packages

* [dotnet6](https://ubuntu.com/security/cves?package=dotnet6) - dotNET CLI tools and runtime
* [dotnet7](https://ubuntu.com/security/cves?package=dotnet7) - dotNET CLI tools and runtime

## Details

USN-6362-1 fixed vulnerabilities in .Net. It was discovered that the fix
for [[CVE-2023-36799](https://ubuntu.com/security/CVE-2023-36799)](https://ubuntu.com/security/CVE-2023-36799) was incomplete. This update fixes the problem.

Original advisory details:

Kevin Jones discovered that .NET did not properly process certain
X.509 certificates. An attacker could possibly use this issue to
cause a denial of service.

## Update instructions

In general, a standard system update will make all the necessary changes.

[Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security)

The problem can be corrected by updating your system to the following package versions:

| Ubuntu Release | Package Version |
| --- | --- |
| 23.04 lunar | [aspnetcore-runtime-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~23.04.1) | | |
| [aspnetcore-runtime-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~23.04.1) | | |
| [dotnet-host](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~23.04.1) | | |
| [dotnet-host-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~23.04.1) | | |
| [dotnet-hostfxr-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~23.04.1) | | |
| [dotnet-hostfxr-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~23.04.1) | | |
| [dotnet-runtime-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~23.04.1) | | |
| [dotnet-runtime-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~23.04.1) | | |
| [dotnet-sdk-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~23.04.1) | | |
| [dotnet-sdk-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~23.04.1) | | |
| [dotnet6](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~23.04.1) | | |
| [dotnet7](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~23.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~23.04.1) | | |
| 22.04 LTS jammy | [aspnetcore-runtime-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~22.04.1) | | |
| [aspnetcore-runtime-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~22.04.1) | | |
| [dotnet-host](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~22.04.1) | | |
| [dotnet-host-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~22.04.1) | | |
| [dotnet-hostfxr-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~22.04.1) | | |
| [dotnet-hostfxr-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~22.04.1) | | |
| [dotnet-runtime-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~22.04.1) | | |
| [dotnet-runtime-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~22.04.1) | | |
| [dotnet-sdk-6.0](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~22.04.1) | | |
| [dotnet-sdk-7.0](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~22.04.1) | | |
| [dotnet6](https://launchpad.net/ubuntu/+source/dotnet6) –  [6.0.124-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet6/6.0.124-0ubuntu1~22.04.1) | | |
| [dotnet7](https://launchpad.net/ubuntu/+source/dotnet7) –  [7.0.113-0ubuntu1~22.04.1](https://launchpad.net/ubuntu/+source/dotnet7/7.0.113-0ubuntu1~22.04.1) | | |

---

### Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

[Get Ubuntu Pro](https://ubuntu.com/pro)

## References

* <https://launchpad.net/bugs/2040208>
* <https://launchpad.net/bugs/2040207>
* [CVE-2023-36799](https://ubuntu.com/security/CVE-2023-36799)

## Related notices

* [USN-6438-1](https://ubuntu.com/security/notices/USN-6438-1)
* [USN-6438-2](https://ubuntu.com/security/notices/USN-6438-2)
* [USN-6362-1](https://ubuntu.com/security/notices/USN-6362-1)
