========================================================================== Ubuntu Security Notice USN-5798-1 January 10, 2023
dotnet6 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS Summary: dotnet6 could be made to crash if it received specially crafted network traffic. Software Description: - dotnet6: dotNET CLI tools and runtime Details: Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service condition for an exposed endpoint. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: aspnetcore-runtime-6.0 6.0.113-0ubuntu1~22.10.1 dotnet-host 6.0.113-0ubuntu1~22.10.1 dotnet-hostfxr-6.0 6.0.113-0ubuntu1~22.10.1 dotnet-runtime-6.0 6.0.113-0ubuntu1~22.10.1 dotnet-sdk-6.0 6.0.113-0ubuntu1~22.10.1 dotnet6 6.0.113-0ubuntu1~22.10.1 Ubuntu 22.04 LTS: aspnetcore-runtime-6.0 6.0.113-0ubuntu1~22.04.1 dotnet-host 6.0.113-0ubuntu1~22.04.1 dotnet-hostfxr-6.0 6.0.113-0ubuntu1~22.04.1 dotnet-runtime-6.0 6.0.113-0ubuntu1~22.04.1 dotnet-sdk-6.0 6.0.113-0ubuntu1~22.04.1 dotnet6 6.0.113-0ubuntu1~22.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5798-1 CVE-2023-21538 Package Information: https://launchpad.net/ubuntu/+source/dotnet6/6.0.113-0ubuntu1~22.10.1 https://launchpad.net/ubuntu/+source/dotnet6/6.0.113-0ubuntu1~22.04.1
OpenPGP_signature
Description: OpenPGP digital signature
