Stay Secure with the Latest Linux Advisories

security advisorycode executionDoS

Ubuntu 24.10 USN-7105-1 critical: dotnet9 code execution and DoS

Several security issues were fixed in .NET.. ========================================================================== Ubuntu Security Notice USN-7105-1 November 12, 2024 dotnet9 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 Summary: Several security issues were fixed in .NET. Software Description: - dotnet9: .NET CLI tools and runtime Details: It was discovered that the NrbfDecoder component in .NET did not properly handle an instance of a type confusion vulnerability. An authenticated attacker could possibly use this issue to gain the privileges of another user and execute arbitrary code. (CVE-2024-43498) It was discovered that the NrbfDecoder component in .NET did not properly perform input validation. An unauthenticated remote attacker could possibly use this issue to cause a denial of service. (CVE-2024-43499) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 aspnetcore-runtime-9.0 9.0.0-rtm-0ubuntu1~24.10.1 dotnet-host-9.0 9.0.0-rtm-0ubuntu1~24.10.1 dotnet-hostfxr-9.0 9.0.0-rtm-0ubuntu1~24.10.1 dotnet-runtime-9.0 9.0.0-rtm-0ubuntu1~24.10.1 dotnet-sdk-9.0 9.0.100-rtm-0ubuntu1~24.10.1 dotnet-sdk-aot-9.0 9.0.100-rtm-0ubuntu1~24.10.1 dotnet9 9.0.100-9.0.0-0ubuntu1~24.10.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7105-1 CVE-2024-43498, CVE-2024-43499 Package Information: https://launchpad.net/ubuntu/+source/dotnet9/9.0.100-9.0.0-0ubuntu1~24.10.1 . Ubuntu has announced USN-7106-1, emphasizing critical Python updatesbecause of several detected vulnerabilities.. Ubuntu Security, dotnet security, software vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Nov 12, 2024 •Critical Ubuntu