Fedora 33: FEDORA-2021-f25eb9e302 High: .NET Core Privilege Escalation

.NET Core is a fast, lightweight and modular platform for creating

cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web

applications and micro-services.

.NET Core contains a runtime conforming to .NET Standards a set of

framework libraries, an SDK containing compilers and a 'dotnet'

application to drive everything.

This is the May 2021 release for .NET Core 3.1. Release Notes are

here:https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.15/3.1.15.md

This includes a fix for CVE-2021-31204: NET Core Elevation of Privilege

Vulnerability Please note this additional change needed to benefit from the CVE

fix: > Additionally, if you've deployed self-contained applications targeting

any of the impacted versions, these applications are also vulnerable and must be

recompiled and redeployed.

* Wed May 12 2021 Omair Majid - 3.1.115-1

- Update to .NET SDK 3.1.115 and Runtime 3.1.15

su -c 'dnf upgrade --advisory FEDORA-2021-f25eb9e302' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure