[ubuntu/mantic-security] dotnet8 8.0.107-8.0.7-0ubuntu1~23.10.1 (Accepted)

Ian Constantin ian.constantin at canonical.com
Tue Jul 9 19:06:09 UTC 2024


dotnet8 (8.0.107-8.0.7-0ubuntu1~23.10.1) mantic-security; urgency=medium

  * New upstream release
  * SECURITY UPDATE: denial of service
    - CVE-2024-30105: Denial of service vulnerability in System.Text.Json
      deserialization.
  * SECURITY UPDATE: denial of service
    - CVE-2024-35264: Denial of service in ASP.NET Core 8.
  * SECURITY UPDATE: denial of service
    - CVE-2024-38095: Denial of service in parsing X.509 Content and
      ObjectIdentifiers.
  * debian/eng/build-dotnet-tarball.sh: SECURITY_PARTNERS_REPOSITORY
    connection method updated.

Date: 2024-07-05 10:46:10.448363+00:00
Changed-By: Ian Constantin <ian.constantin at canonical.com>
https://launchpad.net/ubuntu/+source/dotnet8/8.0.107-8.0.7-0ubuntu1~23.10.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the mantic-changes mailing list