dotnet7 7.0.110-0ubuntu1 source package in Ubuntu

Changelog

dotnet7 (7.0.110-0ubuntu1) mantic; urgency=medium

  * New upstream release.
  * SECURITY UPDATE: remote code exection
    - CVE-2023-35390: When running certain dotnet commands(e.g. dotnet help
      add), dotnet attempts to locate and initiate a new process using
      cmd.exe. However, it prioritizes searching for cmd.exe in the current
      working directory (CWD) before checking other locations. This can
      potentially lead to the execution of malicious code.
  * SECURITY UPDATE: denial of service
    - CVE-2023-38178: ASP.NET Kestrel stream flow control issue causing a
      leak. A malicious QUIC client, that fires off many unidirectional
      streams with closed writing sides. This will bypass the HTTP/3 stream
      limit and Kestrel cannot keep up with stream processing.
  * SECURITY UPDATE: denial of service
    - CVE-2023-38180: Kestrel vulnerability to slow read attacks.

 -- Ian Constantin <email address hidden>  Thu, 03 Aug 2023 08:15:06 +0300

Upload details

Uploaded by:
Ian Constantin
Sponsored by:
Alex Murray
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
amd64 arm64
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic release universe devel

Builds

Mantic: [FULLYBUILT] amd64 [FULLYBUILT] arm64

Downloads

File Size SHA-256 Checksum
dotnet7_7.0.110.orig.tar.xz 327.4 MiB d9b4e32f4caffde1f53980b088f346857d33f833dac107e771fc592567f5c43e
dotnet7_7.0.110-0ubuntu1.debian.tar.xz 45.5 KiB 636dec1886622809439e2c1467cb777ed7d6e3f29b4fced2094b8621158c7d52
dotnet7_7.0.110-0ubuntu1.dsc 2.6 KiB d236b1ad8a0ec8beceaa81fc901297f79c50a38db185b29747b0bae4239c639e

View changes file

Binary packages built by this source

aspnetcore-runtime-7.0: No summary available for aspnetcore-runtime-7.0 in ubuntu noble.

No description available for aspnetcore-runtime-7.0 in ubuntu noble.

aspnetcore-targeting-pack-7.0: Internal - targeting pack for Microsoft.AspNetCore.App 7.0

 This package provides a targeting pack for Microsoft.AspNetCore.App 7.0
 that allows developers to compile against and target
 Microsoft.AspNetCore.App 7.0 applications using the .NET SDK.
 This are not meant for general use.

dotnet-apphost-pack-7.0: No summary available for dotnet-apphost-pack-7.0 in ubuntu noble.

No description available for dotnet-apphost-pack-7.0 in ubuntu noble.

dotnet-apphost-pack-7.0-dbgsym: No summary available for dotnet-apphost-pack-7.0-dbgsym in ubuntu noble.

No description available for dotnet-apphost-pack-7.0-dbgsym in ubuntu noble.

dotnet-host-7.0: dotNET host command line

 The dotNET host is a command line program that runs a standalone
 dotNET application or launches the SDK.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet-host-7.0-dbgsym: debug symbols for dotnet-host-7.0
dotnet-hostfxr-7.0: dotNET host resolver

 The dotNET host resolver contains the logic to resolve and select
 the right version of the dotNet SDK or runtime to use.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet-hostfxr-7.0-dbgsym: debug symbols for dotnet-hostfxr-7.0
dotnet-runtime-7.0: dotNET runtime

 The dotNET runtime contains everything needed to run dotNet applications.
 It includes a high performance Virtual Machine as well as the framework
 libraries used by dotNet applications.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet-runtime-7.0-dbgsym: No summary available for dotnet-runtime-7.0-dbgsym in ubuntu noble.

No description available for dotnet-runtime-7.0-dbgsym in ubuntu noble.

dotnet-sdk-7.0: No summary available for dotnet-sdk-7.0 in ubuntu noble.

No description available for dotnet-sdk-7.0 in ubuntu noble.

dotnet-sdk-7.0-dbgsym: debug symbols for dotnet-sdk-7.0
dotnet-sdk-7.0-source-built-artifacts: No summary available for dotnet-sdk-7.0-source-built-artifacts in ubuntu noble.

No description available for dotnet-sdk-7.0-source-built-artifacts in ubuntu noble.

dotnet-targeting-pack-7.0: No summary available for dotnet-targeting-pack-7.0 in ubuntu noble.

No description available for dotnet-targeting-pack-7.0 in ubuntu noble.

dotnet-templates-7.0: dotNET 7.0 templates

 This package contains templates used by the dotNet SDK.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet7: No summary available for dotnet7 in ubuntu noble.

No description available for dotnet7 in ubuntu noble.

netstandard-targeting-pack-2.1-7.0: No summary available for netstandard-targeting-pack-2.1-7.0 in ubuntu noble.

No description available for netstandard-targeting-pack-2.1-7.0 in ubuntu noble.