ELSA-2023-5710 Important: Oracle Linux 8 dotnet6.0 security update
Oracle Linux Security Advisory ELSA-2023-5710
http://linux.oracle.com/errata/ELSA-2023-5710.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
aspnetcore-runtime-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
aspnetcore-targeting-pack-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-apphost-pack-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-hostfxr-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-runtime-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-sdk-6.0-6.0.123-1.0.1.el8_8.x86_64.rpm
dotnet-targeting-pack-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-templates-6.0-6.0.123-1.0.1.el8_8.x86_64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.0.1.el8_8.x86_64.rpm
aarch64:
aspnetcore-runtime-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
aspnetcore-targeting-pack-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-apphost-pack-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-hostfxr-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-runtime-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-sdk-6.0-6.0.123-1.0.1.el8_8.aarch64.rpm
dotnet-targeting-pack-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-templates-6.0-6.0.123-1.0.1.el8_8.aarch64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.0.1.el8_8.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//dotnet6.0-6.0.123-1.0.1.el8_8.src.rpm
Related CVEs:
CVE-2023-44487
Description of changes:
[6.0.123-1.0.1]
- Update to .NET SDK 6.0.123 and Runtime 6.0.23
- Resolves: RHEL-11696
[6.0.122-1.0.1]
- Update to .NET SDK 6.0.122 and Runtime 6.0.22
- Resolves: RHEL-1996
[6.0.121-1.0.1]
- Update to .NET SDK 6.0.121 and Runtime 6.0.21
- Resolves: RHBZ#2228567
[6.0.120-1.0.1]
- Add missing Oracle Linux Runtime IDs
[6.0.120-1]
- Update to .NET SDK 6.0.120 and Runtime 6.0.20
- Resolves: RHBZ#2219637
[6.0.119-2]
- Update to .NET SDK 6.0.119 and Runtime 6.0.19
- Resolves: RHBZ#2174980
[6.0.118-1]
- Update to .NET SDK 6.0.118 and Runtime 6.0.18
- Resolves: RHBZ#2212378
[6.0.117-2]
- Update to .NET SDK 6.0.117 and Runtime 6.0.17
- Resolves: RHBZ#2190262
[6.0.116-2]
- Update to .NET SDK 6.0.116 and Runtime 6.0.16
- Resolves: RHBZ#2183580
[6.0.115-2]
- Update to .NET SDK 6.0.115 and Runtime 6.0.15
- Resolves: RHBZ#2174980
[6.0.114-2]
- Update to .NET SDK 6.0.114 and Runtime 6.0.14
- Resolves: RHBZ#2166765
[6.0.113-2]
- Update to .NET SDK 6.0.113 and Runtime 6.0.13
- Resolves: RHBZ#2154456
[6.0.112-2]
- Update to .NET SDK 6.0.112 and Runtime 6.0.12
- Resolves: RHBZ#2150145
[6.0.111-3]
- Disable subpackages provided by another SRPM
- Related: RHBZ#2138275
[6.0.111-2]
- Update to .NET SDK 6.0.111 and Runtime 6.0.11
- Resolves: RHBZ#2138275
[6.0.108-1]
- Update to .NET SDK 6.0.108 and Runtime 6.0.8
- Resolves: RHBZ#2112408
[6.0.107-2]
- Update to .NET SDK 6.0.107 and Runtime 6.0.7
- Resolves: RHBZ#2103268
[6.0.106-1]
- Update to .NET SDK 6.0.106 and Runtime 6.0.6
- Resolves: RHBZ#2093430
[6.0.105-1]
- Update to .NET SDK 6.0.105 and Runtime 6.0.5
- Resolves: RHBZ#2082265
[6.0.104-3]
- Update to .NET SDK 6.0.104 and Runtime 6.0.4
- Resolves: RHBZ#2072006
[6.0.102-1]
- Update to .NET SDK 6.0.102 and Runtime 6.0.2
- Resolves: RHBZ#2030390
- Resolves: RHBZ#2048256
[6.0.100-1]
- Fix build against clang 13
- Resolves: RHBZ#2003061
- Resolves: RHBZ#2015536
- Resolves: RHBZ#2014666
[6.0.100-0.10]
- Disable bootstrap
- Related: RHBZ#2016373
[6.0.100-0.9]
- Fix msbuild to run on s390x
- Related: RHBZ#2016373
[6.0.100-0.8]
- Update to .NET SDK 6.0.100 and Runtime 6.0.0
- Related: RHBZ#2016373
[6.0.0-0.7.rc2]
- Update to .NET SDK 6.0.100-rc.2 and Runtime 6.0.0-rc.2
- Resolves: RHBZ#2016373
[6.0.0-0.6.28be3e9a006d90d8c6e87d4353b77882829df718]
- Enable building on arm64
- Related: RHBZ#1986017
[6.0.0-0.5.28be3e9a006d90d8c6e87d4353b77882829df718]
- Enable building on s390x
- Related: RHBZ#1986017
[6.0.0-0.4.28be3e9a006d90d8c6e87d4353b77882829df718]
- Clean up tarball and add initial support for s390x
- Related: RHBZ#1986017
[6.0.0-0.3.28be3e9a006d90d8c6e87d4353b77882829df718]
- Update to work-in-progress RC2 release
[6.0.0-0.2.preview6]
- Updated to build the latest source-build preview
[6.0.0-0.1.preview6]
- Initial package for .NET 6
[5.0.204-1]
- Update to .NET SDK 5.0.204 and Runtime 5.0.7
[5.0.203-1]
- Update to .NET SDK 5.0.203 and Runtime 5.0.6
[5.0.202-1]
- Update to .NET SDK 5.0.202 and Runtime 5.0.5
[5.0.104-2]
- Mark files under /etc/ as config(noreplace)
- Add an rpm-inspect configuration file
- Add an rpmlintrc file
- Enable gating for release branches and ELN too
[5.0.104-1]
- Update to .NET SDK 5.0.104 and Runtime 5.0.4
- Drop unneeded/upstreamed patches
[5.0.103-2]
- Add Fedora 35 RIDs
[5.0.103-1]
- Update to .NET SDK 5.0.103 and Runtime 5.0.3
[5.0.102-2]
- Disable bootstrap
[5.0.100-2]
- Update to .NET Core Runtime 5.0.0 and SDK 5.0.100 commit 9c4e5de
[5.0.100-1]
- Update to .NET Core Runtime 5.0.0 and SDK 5.0.100
[5.0.100-0.4.20201202git337413b]
- Update to latest 5.0 pre-GA commit
[5.0.100-0.4.20201123gitdee899c]
- Update to 5.0 pre-GA commit
[5.0.100-0.3.preview8]
- Update to Preview 8
[5.0.100-0.2.preview4]
- Fix building with custom CFLAGS/CXXFLAGS/LDFLAGS
- Clean up patches
[5.0.100-0.1.preview4]
- Initial build
[3.1.105-4]
- Disable bootstrap
[3.1.105-3]
- Re-bootstrap aarch64
[3.1.105-3]
- Disable bootstrap
[3.1.105-1]
- Bootstrap aarch64
[3.1.105-1]
- Update to .NET Core Runtime 3.1.5 and SDK 3.1.105
[3.1.104-1]
- Update to .NET Core Runtime 3.1.4 and SDK 3.1.104
[3.1.103-1]
- Update to .NET Core Runtime 3.1.3 and SDK 3.1.103
[3.1.102-1]
- Update to .NET Core Runtime 3.1.2 and SDK 3.1.102
[3.1.101-4]
- Disable bootstrap
[3.1.101-3]
- Enable bootstrap
- Add Fedora 33 runtime ids
[3.1.101-2]
- Disable bootstrap
[3.1.101-1]
- Update to .NET Core Runtime 3.1.1 and SDK 3.1.101
[3.1.100-1]
- Update to .NET Core Runtime 3.1.0 and SDK 3.1.100
[3.1.100-0.4.preview3]
- Fix apphost permissions
[3.1.100-0.3.preview3]
- Update to .NET Core Runtime 3.1.0-preview3.19553.2 and SDK
3.1.100-preview3-014645
[3.1.100-0.2]
- Update to .NET Core 3.1 Preview 2
[3.1.100-0.1]
- Update to .NET Core 3.1 Preview 1
[3.0.100-5]
- Add cgroupv2 support to .NET Core
[3.0.100-4]
- Include fix from coreclr for building on Fedora 32
[3.0.100-3]
- Harden built binaries to pass annocheck
[3.0.100-2]
- Export DOTNET_ROOT in profile to make apphost lookup work
[3.0.100-1]
- Update to .NET Core Runtime 3.0.0 and SDK 3.0.100
[3.0.100-0.18.rc1]
- Update to .NET Core Runtime 3.0.0-rc1-19456-20 and SDK 3.0.100-rc1-014190
[3.0.100-0.16.preview9]
- Fix files duplicated between dotnet-apphost-pack-3.0 and dotnet-targeting-pack-3.0
- Fix dependencies between .NET SDK and the targeting packs
[3.0.100-0.15.preview9]
- Update to .NET Core Runtime 3.0.0-preview 9 and SDK 3.0.100-preview9
[3.0.100-0.11.preview8]
- Update to .NET Core Runtime 3.0.0-preview8-28405-07 and SDK
3.0.100-preview8-013656
[3.0.100-0.9.preview7]
- Update to .NET Core Runtime 3.0.0-preview7-27912-14 and SDK
3.0.100-preview7-012821
[3.0.100-0.8.preview7]
- Update to .NET Core Runtime 3.0.0-preview7-27902-19 and SDK
3.0.100-preview7-012802
[3.0.0-0.7.preview6]
- Obsolete dotnet-sdk-3.0.1xx
- Add supackages for targeting packs
- Add -fcf-protection to CFLAGS
[3.0.0-0.6.preview6]
- Update to .NET Core Runtime 3.0.0-preview6-27804-01 and SDK 3.0.100-preview6-012264
- Set dotnet installation location in /etc/dotnet/install_location
- Update targeting packs
- Install managed symbols
- Completely conditionalize libunwind bundling
[3.0.0-0.3.preview4]
- Update to .NET Core 3.0 preview 4
[3.0.0-0.1.preview1]
- Update to .NET Core 3.0 preview 1
[2.2.100]
- Update to .NET Core 2.2.0
[2.2.100-0.2.preview3]
- Update to .NET Core 2.2.0-preview3
[2.1.403-3]
- Add host-fxr-2.1 subpackage
[2.1.403-2]
- Disable telemetry by default
- Users have to manually export DOTNET_CLI_TELEMETRY_OPTOUT=0 to enable
[2.1.403-1]
- Update to .NET Core Runtime 2.1.5 and SDK 2.1.403
[2.1.402-2]
- Add ~/.dotnet/tools to $PATH to make it easier to use dotnet tools
[2.1.402-1]
- Update to .NET Core Runtime 2.1.4 and SDK 2.1.402
[2.1.401-2]
- Use distro-standard flags when building .NET Core
[2.1.401-1]
- Update to .NET Core Runtime 2.1.3 and SDK 2.1.401
[2.1.302-1]
- Update to .NET Core Runtime 2.1.2 and SDK 2.1.302
[2.1.301-1]
- Update to .NET Core 2.1
[2.0.7-1]
- Update to .NET Core 2.0.7
[2.0.6-2]
- Enable bash completion for dotnet
- Remove redundant buildrequires and requires
[2.0.6-1]
- Update to .NET Core 2.0.6
[2.0.5-1]
- Update to .NET Core 2.0.5
[2.0.3-5]
- Don't apply corefx clang warnings fix on clang < 5
[2.0.3-4]
- Add a test script to sanity check debug and symbol info.
- Build with clang 5.0
- Make main package real instead of using a virtual provides (see RHBZ 1519325)
[2.0.3-3]
- Add a Provides for 'dotnet'
- Fix conditional macro
[2.0.3-2]
- Fix build on Fedora 27
[2.0.3-1]
- Update to .NET Core 2.0.3
[2.0.0-4]
- Add a hack to let omnisharp work
[2.0.0-3]
- Add a patch for building coreclr and core-setup correctly on Fedora >= 27
[2.0.0-2]
- Move libicu/libcurl/libunwind requires to runtime package
- Make sdk depend on the exact version of the runtime package
[2.0.0-1]
- Update to 2.0.0 final release
[2.0.0-0.3.preview2]
- Add man pages
[2.0.0-0.2.preview2]
- Add Requires on libicu
- Split into multiple packages
- Do not repeat first-run message
[2.0.0-0.1.preview2]
- Update to .NET Core 2.0 Preview 2
[1.1.0-7]
- rebuilt with latest libldb
[1.1.0-6]
- compat-openssl 1.0 for F26 for now
[1.1.0-5]
- Fix wrong commit id's
[1.1.0-4]
- Use commit id's instead of branch names
[1.1.0-3]
- Improper patch5 fix
[1.1.0-2]
- SPEC cleanup
- git removal (using all tarballs for reproducible builds)
- more reasonable versioning
[1.1.0-1]
- Fixed debuginfo going to separate package (Patch1)
- Added F25/F26 RIL and fixed the version info (Patch2)
- Added F25/F26 RIL in Microsoft.NETCore.App suported runtime graph (Patch3)
- SPEC file cleanup
[1.1.0-0]
- Initial RPM for Fedora 25/26.
A dotnet6.0 security update has been released for Oracle Linux 8.
