[Bug 2058746] Re: Support information in README.source is outdated

[Launchpad Bug Tracker]

This bug was fixed in the package dotnet8 -
8.0.105-8.0.5-0ubuntu1~23.10.1

---------------
dotnet8 (8.0.105-8.0.5-0ubuntu1~23.10.1) mantic-security; urgency=medium

  * New upstream release
  * SECURITY UPDATE: stack buffer overflow
    - CVE-2024-30045: a stack based buffer overflow in the .NET Double Parse
      routine allows for remote code execution.
  * SECURITY UPDATE: resource dead-lock
    - CVE-2024-30046: a dead-lock in Http2OutputProducer.Stop() results in a
      denial of service.

 -- Ian Constantin <ian.constantin at canonical.com>  Thu, 09 May 2024
17:16:34 +0300

** Changed in: dotnet8 (Ubuntu Mantic)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-30045

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-30046

** Changed in: dotnet8 (Ubuntu Jammy)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dotnet6 in Ubuntu.
https://bugs.launchpad.net/bugs/2058746

Title:
  Support information in README.source is outdated

Status in dotnet6 package in Ubuntu:
  Fix Released
Status in dotnet7 package in Ubuntu:
  Fix Released
Status in dotnet8 package in Ubuntu:
  Fix Released
Status in dotnet6 source package in Jammy:
  Fix Committed
Status in dotnet8 source package in Jammy:
  Fix Released
Status in dotnet6 source package in Mantic:
  Fix Committed
Status in dotnet8 source package in Mantic:
  Fix Released

Bug description:
  The debian/README.source file still contains the old Ubuntu support
  policy, which is outdated.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions