Oracle Linux Security Advisory ELSA-2023-5710

https://linux.oracle.com/errata/ELSA-2023-5710.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
aspnetcore-targeting-pack-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-apphost-pack-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-hostfxr-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-runtime-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-sdk-6.0-6.0.123-1.0.1.el8_8.x86_64.rpm
dotnet-targeting-pack-6.0-6.0.23-1.0.1.el8_8.x86_64.rpm
dotnet-templates-6.0-6.0.123-1.0.1.el8_8.x86_64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.0.1.el8_8.x86_64.rpm

aarch64:
aspnetcore-runtime-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
aspnetcore-targeting-pack-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-apphost-pack-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-hostfxr-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-runtime-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-sdk-6.0-6.0.123-1.0.1.el8_8.aarch64.rpm
dotnet-targeting-pack-6.0-6.0.23-1.0.1.el8_8.aarch64.rpm
dotnet-templates-6.0-6.0.123-1.0.1.el8_8.aarch64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.0.1.el8_8.aarch64.rpm


SRPMS:
https://oss.oracle.com:443/ol8/SRPMS-updates//dotnet6.0-6.0.123-1.0.1.el8_8.src.rpm

Related CVEs:

CVE-2023-44487




Description of changes:

[6.0.123-1.0.1]
- Update to .NET SDK 6.0.123 and Runtime 6.0.23
- Resolves: RHEL-11696

[6.0.122-1.0.1]
- Update to .NET SDK 6.0.122 and Runtime 6.0.22
- Resolves: RHEL-1996

[6.0.121-1.0.1]
- Update to .NET SDK 6.0.121 and Runtime 6.0.21
- Resolves: RHBZ#2228567

[6.0.120-1.0.1]
- Add missing Oracle Linux Runtime IDs

[6.0.120-1]
- Update to .NET SDK 6.0.120 and Runtime 6.0.20
- Resolves: RHBZ#2219637

[6.0.119-2]
- Update to .NET SDK 6.0.119 and Runtime 6.0.19
- Resolves: RHBZ#2174980

[6.0.118-1]
- Update to .NET SDK 6.0.118 and Runtime 6.0.18
- Resolves: RHBZ#2212378

[6.0.117-2]
- Update to .NET SDK 6.0.117 and Runtime 6.0.17
- Resolves: RHBZ#2190262

[6.0.116-2]
- Update to .NET SDK 6.0.116 and Runtime 6.0.16
- Resolves: RHBZ#2183580

[6.0.115-2]
- Update to .NET SDK 6.0.115 and Runtime 6.0.15
- Resolves: RHBZ#2174980

[6.0.114-2]
- Update to .NET SDK 6.0.114 and Runtime 6.0.14
- Resolves: RHBZ#2166765

[6.0.113-2]
- Update to .NET SDK 6.0.113 and Runtime 6.0.13
- Resolves: RHBZ#2154456

[6.0.112-2]
- Update to .NET SDK 6.0.112 and Runtime 6.0.12
- Resolves: RHBZ#2150145

[6.0.111-3]
- Disable subpackages provided by another SRPM
- Related: RHBZ#2138275

[6.0.111-2]
- Update to .NET SDK 6.0.111 and Runtime 6.0.11
- Resolves: RHBZ#2138275

[6.0.108-1]
- Update to .NET SDK 6.0.108 and Runtime 6.0.8
- Resolves: RHBZ#2112408

[6.0.107-2]
- Update to .NET SDK 6.0.107 and Runtime 6.0.7
- Resolves: RHBZ#2103268

[6.0.106-1]
- Update to .NET SDK 6.0.106 and Runtime 6.0.6
- Resolves: RHBZ#2093430

[6.0.105-1]
- Update to .NET SDK 6.0.105 and Runtime 6.0.5
- Resolves: RHBZ#2082265

[6.0.104-3]
- Update to .NET SDK 6.0.104 and Runtime 6.0.4
- Resolves: RHBZ#2072006

[6.0.102-1]
- Update to .NET SDK 6.0.102 and Runtime 6.0.2
- Resolves: RHBZ#2030390
- Resolves: RHBZ#2048256

[6.0.100-1]
- Fix build against clang 13
- Resolves: RHBZ#2003061
- Resolves: RHBZ#2015536
- Resolves: RHBZ#2014666

[6.0.100-0.10]
- Disable bootstrap
- Related: RHBZ#2016373

[6.0.100-0.9]
- Fix msbuild to run on s390x
- Related: RHBZ#2016373

[6.0.100-0.8]
- Update to .NET SDK 6.0.100 and Runtime 6.0.0
- Related: RHBZ#2016373

[6.0.0-0.7.rc2]
- Update to .NET SDK 6.0.100-rc.2 and Runtime 6.0.0-rc.2
- Resolves: RHBZ#2016373

[6.0.0-0.6.28be3e9a006d90d8c6e87d4353b77882829df718]
- Enable building on arm64
- Related: RHBZ#1986017

[6.0.0-0.5.28be3e9a006d90d8c6e87d4353b77882829df718]
- Enable building on s390x
- Related: RHBZ#1986017

[6.0.0-0.4.28be3e9a006d90d8c6e87d4353b77882829df718]
- Clean up tarball and add initial support for s390x
- Related: RHBZ#1986017

[6.0.0-0.3.28be3e9a006d90d8c6e87d4353b77882829df718]
- Update to work-in-progress RC2 release

[6.0.0-0.2.preview6]
- Updated to build the latest source-build preview

[6.0.0-0.1.preview6]
- Initial package for .NET 6

[5.0.204-1]
- Update to .NET SDK 5.0.204 and Runtime 5.0.7

[5.0.203-1]
- Update to .NET SDK 5.0.203 and Runtime 5.0.6

[5.0.202-1]
- Update to .NET SDK 5.0.202 and Runtime 5.0.5

[5.0.104-2]
- Mark files under /etc/ as config(noreplace)
- Add an rpm-inspect configuration file
- Add an rpmlintrc file
- Enable gating for release branches and ELN too

[5.0.104-1]
- Update to .NET SDK 5.0.104 and Runtime 5.0.4
- Drop unneeded/upstreamed patches

[5.0.103-2]
- Add Fedora 35 RIDs

[5.0.103-1]
- Update to .NET SDK 5.0.103 and Runtime 5.0.3

[5.0.102-2]
- Disable bootstrap

[5.0.100-2]
- Update to .NET Core Runtime 5.0.0 and SDK 5.0.100 commit 9c4e5de

[5.0.100-1]
- Update to .NET Core Runtime 5.0.0 and SDK 5.0.100

[5.0.100-0.4.20201202git337413b]
- Update to latest 5.0 pre-GA commit

[5.0.100-0.4.20201123gitdee899c]
- Update to 5.0 pre-GA commit

[5.0.100-0.3.preview8]
- Update to Preview 8

[5.0.100-0.2.preview4]
- Fix building with custom CFLAGS/CXXFLAGS/LDFLAGS
- Clean up patches

[5.0.100-0.1.preview4]
- Initial build

[3.1.105-4]
- Disable bootstrap

[3.1.105-3]
- Re-bootstrap aarch64

[3.1.105-3]
- Disable bootstrap

[3.1.105-1]
- Bootstrap aarch64

[3.1.105-1]
- Update to .NET Core Runtime 3.1.5 and SDK 3.1.105

[3.1.104-1]
- Update to .NET Core Runtime 3.1.4 and SDK 3.1.104

[3.1.103-1]
- Update to .NET Core Runtime 3.1.3 and SDK 3.1.103

[3.1.102-1]
- Update to .NET Core Runtime 3.1.2 and SDK 3.1.102

[3.1.101-4]
- Disable bootstrap

[3.1.101-3]
- Enable bootstrap
- Add Fedora 33 runtime ids

[3.1.101-2]
- Disable bootstrap

[3.1.101-1]
- Update to .NET Core Runtime 3.1.1 and SDK 3.1.101

[3.1.100-1]
- Update to .NET Core Runtime 3.1.0 and SDK 3.1.100

[3.1.100-0.4.preview3]
- Fix apphost permissions

[3.1.100-0.3.preview3]
- Update to .NET Core Runtime 3.1.0-preview3.19553.2 and SDK
  3.1.100-preview3-014645

[3.1.100-0.2]
- Update to .NET Core 3.1 Preview 2

[3.1.100-0.1]
- Update to .NET Core 3.1 Preview 1

[3.0.100-5]
- Add cgroupv2 support to .NET Core

[3.0.100-4]
- Include fix from coreclr for building on Fedora 32

[3.0.100-3]
- Harden built binaries to pass annocheck

[3.0.100-2]
- Export DOTNET_ROOT in profile to make apphost lookup work

[3.0.100-1]
- Update to .NET Core Runtime 3.0.0 and SDK 3.0.100

[3.0.100-0.18.rc1]
- Update to .NET Core Runtime 3.0.0-rc1-19456-20 and SDK 3.0.100-rc1-014190

[3.0.100-0.16.preview9]
- Fix files duplicated between dotnet-apphost-pack-3.0 and dotnet-targeting-pack-3.0
- Fix dependencies between .NET SDK and the targeting packs

[3.0.100-0.15.preview9]
- Update to .NET Core Runtime 3.0.0-preview 9 and SDK 3.0.100-preview9

[3.0.100-0.11.preview8]
- Update to .NET Core Runtime 3.0.0-preview8-28405-07 and SDK
  3.0.100-preview8-013656

[3.0.100-0.9.preview7]
- Update to .NET Core Runtime 3.0.0-preview7-27912-14 and SDK
  3.0.100-preview7-012821

[3.0.100-0.8.preview7]
- Update to .NET Core Runtime 3.0.0-preview7-27902-19 and SDK
  3.0.100-preview7-012802

[3.0.0-0.7.preview6]
- Obsolete dotnet-sdk-3.0.1xx
- Add supackages for targeting packs
- Add -fcf-protection to CFLAGS

[3.0.0-0.6.preview6]
- Update to .NET Core Runtime 3.0.0-preview6-27804-01 and SDK 3.0.100-preview6-012264
- Set dotnet installation location in /etc/dotnet/install_location
- Update targeting packs
- Install managed symbols
- Completely conditionalize libunwind bundling

[3.0.0-0.3.preview4]
- Update to .NET Core 3.0 preview 4

[3.0.0-0.1.preview1]
- Update to .NET Core 3.0 preview 1

[2.2.100]
- Update to .NET Core 2.2.0

[2.2.100-0.2.preview3]
- Update to .NET Core 2.2.0-preview3

[2.1.403-3]
- Add host-fxr-2.1 subpackage

[2.1.403-2]
- Disable telemetry by default
- Users have to manually export DOTNET_CLI_TELEMETRY_OPTOUT=0 to enable

[2.1.403-1]
- Update to .NET Core Runtime 2.1.5 and SDK 2.1.403

[2.1.402-2]
- Add ~/.dotnet/tools to $PATH to make it easier to use dotnet tools

[2.1.402-1]
- Update to .NET Core Runtime 2.1.4 and SDK 2.1.402

[2.1.401-2]
- Use distro-standard flags when building .NET Core

[2.1.401-1]
- Update to .NET Core Runtime 2.1.3 and SDK 2.1.401

[2.1.302-1]
- Update to .NET Core Runtime 2.1.2 and SDK 2.1.302

[2.1.301-1]
- Update to .NET Core 2.1

[2.0.7-1]
- Update to .NET Core 2.0.7

[2.0.6-2]
- Enable bash completion for dotnet
- Remove redundant buildrequires and requires

[2.0.6-1]
- Update to .NET Core 2.0.6

[2.0.5-1]
- Update to .NET Core 2.0.5

[2.0.3-5]
- Don't apply corefx clang warnings fix on clang < 5

[2.0.3-4]
- Add a test script to sanity check debug and symbol info.
- Build with clang 5.0
- Make main package real instead of using a virtual provides (see RHBZ 1519325)

[2.0.3-3]
- Add a Provides for 'dotnet'
- Fix conditional macro

[2.0.3-2]
- Fix build on Fedora 27

[2.0.3-1]
- Update to .NET Core 2.0.3

[2.0.0-4]
- Add a hack to let omnisharp work

[2.0.0-3]
- Add a patch for building coreclr and core-setup correctly on Fedora >= 27

[2.0.0-2]
- Move libicu/libcurl/libunwind requires to runtime package
- Make sdk depend on the exact version of the runtime package

[2.0.0-1]
- Update to 2.0.0 final release

[2.0.0-0.3.preview2]
- Add man pages

[2.0.0-0.2.preview2]
- Add Requires on libicu
- Split into multiple packages
- Do not repeat first-run message

[2.0.0-0.1.preview2]
- Update to .NET Core 2.0 Preview 2

[1.1.0-7]
- rebuilt with latest libldb

[1.1.0-6]
- compat-openssl 1.0 for F26 for now

[1.1.0-5]
- Fix wrong commit id's

[1.1.0-4]
- Use commit id's instead of branch names

[1.1.0-3]
- Improper patch5 fix

[1.1.0-2]
- SPEC cleanup
- git removal (using all tarballs for reproducible builds)
- more reasonable versioning

[1.1.0-1]
- Fixed debuginfo going to separate package (Patch1)
- Added F25/F26 RIL and fixed the version info (Patch2)
- Added F25/F26 RIL in Microsoft.NETCore.App suported runtime graph (Patch3)
- SPEC file cleanup

[1.1.0-0]
- Initial RPM for Fedora 25/26.


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata