[SECURITY] Fedora 37 Update: dotnet6.0-6.0.110-2.fc37
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-2c37647a9c
2022-11-20 01:22:45.004923
--------------------------------------------------------------------------------
Name : dotnet6.0
Product : Fedora 37
Version : 6.0.110
Release : 2.fc37
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.
It particularly focuses on creating console applications, web
applications and micro-services.
.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.
--------------------------------------------------------------------------------
Update Information:
This is the October 2022 monthly update for .NET 6. It updates the SDK to
6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE
2022-41032
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 31 2022 Omair Majid <omajid(a)redhat.com> - 6.0.110-2
- Set OPENSSL_ENABLE_SHA1_SIGNATURES=1 when building
* Fri Oct 28 2022 Omair Majid <omajid(a)redhat.com> - 6.0.110-1
- Update to .NET SDK 6.0.110 and Runtime 6.0.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2133875 - CVE-2022-41032 dotnet6.0: dotnet: Nuget cache poisoning on Linux
via world-writable cache directory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2133875
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-2c37647a9c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------