Includes security fixes to the net/http package, as well as bug fixes to the runtime and the go command. Full changelog.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-77ace1a41b 2025-04-15 18:33:59.718657+00:00 -------------------------------------------------------------------------------- Name : golang Product : Fedora 41 Version : 1.23.8 Release : 1.fc41 URL : https://go.dev Summary : The Go Programming Language Description : The Go Programming Language. -------------------------------------------------------------------------------- Update Information: Includes security fixes to the net/http package, as well as bug fixes to the runtime and the go command. Full changelog. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 14 2025 Packit - 1.23.8-1 - Update to 1.23.8 upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #2279816 - TRIAGE CVE-2024-24788 golang: net: malformed DNS message can cause infinite loop [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2279816 [ 2 ] Bug #2351948 - CVE-2025-22870 golang: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2351948 [ 3 ] Bug #2358578 - CVE-2025-22871 golang: Request smuggling due to acceptance of invalid chunked data in net/http [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2358578 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-77ace1a41b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the FedoraProject GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-2667 http://linux.oracle.com/errata/ELSA-2025-2667.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: aspnetcore-runtime-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm aspnetcore-runtime-dbg-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm aspnetcore-targeting-pack-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm dotnet-9.0.104-1.0.1.el8_10.x86_64.rpm dotnet-apphost-pack-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm dotnet-host-9.0.3-1.0.1.el8_10.x86_64.rpm dotnet-hostfxr-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm dotnet-runtime-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm dotnet-runtime-dbg-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm dotnet-sdk-9.0-9.0.104-1.0.1.el8_10.x86_64.rpm dotnet-sdk-aot-9.0-9.0.104-1.0.1.el8_10.x86_64.rpm dotnet-sdk-dbg-9.0-9.0.104-1.0.1.el8_10.x86_64.rpm dotnet-targeting-pack-9.0-9.0.3-1.0.1.el8_10.x86_64.rpm dotnet-templates-9.0-9.0.104-1.0.1.el8_10.x86_64.rpm netstandard-targeting-pack-2.1-9.0.104-1.0.1.el8_10.x86_64.rpm dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.0.1.el8_10.x86_64.rpm aarch64: aspnetcore-runtime-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm aspnetcore-runtime-dbg-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm aspnetcore-targeting-pack-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm dotnet-9.0.104-1.0.1.el8_10.aarch64.rpm dotnet-apphost-pack-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm dotnet-host-9.0.3-1.0.1.el8_10.aarch64.rpm dotnet-hostfxr-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm dotnet-runtime-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm dotnet-runtime-dbg-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm dotnet-sdk-9.0-9.0.104-1.0.1.el8_10.aarch64.rpm dotnet-sdk-aot-9.0-9.0.104-1.0.1.el8_10.aarch64.rpm dotnet-sdk-dbg-9.0-9.0.104-1.0.1.el8_10.aarch64.rpm dotnet-targeting-pack-9.0-9.0.3-1.0.1.el8_10.aarch64.rpm dotnet-templates-9.0-9.0.104-1.0.1.el8_10.aarch64.rpm netstandard-targeting-pack-2.1-9.0.104-1.0.1.el8_10.aarch64.rpm dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//dotnet9.0-9.0.104-1.0.1.el8_10.src.rpm Related CVEs: CVE-2025-24070 Description of changes: [9.0.104-1.0.1] - Add support for Oracle Linux [9.0.104-1] - Update to .NET SDK 9.0.104 and Runtime 9.0.3 - Resolves:RHEL-81645 _______________________________________________ El-errata mailing list
This is the June 2023 monthly update for .NET 6. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.18.md - SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.118.md. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-edb993aeaf 2023-06-24 01:20:29.311655 --------------------------------------------------------------------------------Name : dotnet6.0 Product : Fedora 37 Version : 6.0.118 Release : 1.fc37 URL : https://github.com/dotnet/ Summary : .NET Runtime and SDK Description : .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. --------------------------------------------------------------------------------Update Information: This is the June 2023 monthly update for .NET 6. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.18.md -SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.118.md --------------------------------------------------------------------------------ChangeLog: * Wed Jun 14 2023 Omair Majid - 6.0.118-1 - Update to .NET SDK 6.0.118 and Runtime 6.0.18 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-edb993aeaf' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the FedoraProject GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This includes a fix for CVE-2022-38013. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-847c67b3cd 2022-10-08 17:47:12.358155 --------------------------------------------------------------------------------Name : dotnet3.1 Product : Fedora 35 Version : 3.1.423 Release : 1.fc35 URL : https://github.com/dotnet/ Summary : .NET Core Runtime and SDK Description : .NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. --------------------------------------------------------------------------------Update Information: Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This includes a fix for CVE-2022-38013 --------------------------------------------------------------------------------ChangeLog: * Tue Sep 27 2022 Omair Majid - 3.1.423-1 - Update to .NET SDK 3.1.423 and Runtime 3.1.29 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-847c67b3cd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
This is the monthly update for .NET for August 2022. This updates the .NET SDK to 6.0.108 and .NET Runtime to 6.0.8. This update includes a fix for CVE 2022-34716.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-f2ba9be204 2022-08-25 07:47:25.314042 --------------------------------------------------------------------------------Name : dotnet6.0 Product : Fedora 35 Version : 6.0.108 Release : 1.fc35 URL : https://github.com/dotnet/ Summary : .NET Runtime and SDK Description : .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. --------------------------------------------------------------------------------Update Information: This is the monthly update for .NET for August 2022. This updates the .NET SDK to 6.0.108 and .NET Runtime to 6.0.8. This update includes a fix for CVE 2022-34716. --------------------------------------------------------------------------------ChangeLog: * Tue Aug 9 2022 Omair Majid - 6.0.108-1 - Update to .NET SDK 6.0.108 and Runtime 6.0.8 * Thu Jul 21 2022 Fedora Release Engineering - 6.0.107-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-f2ba9be204' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can befound at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-4588 https://linux.oracle.com/errata/ELSA-2022-4588.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: aspnetcore-runtime-6.0-6.0.5-1.0.1.el9_0.x86_64.rpm aspnetcore-targeting-pack-6.0-6.0.5-1.0.1.el9_0.x86_64.rpm dotnet-apphost-pack-6.0-6.0.5-1.0.1.el9_0.x86_64.rpm dotnet-host-6.0.5-1.0.1.el9_0.x86_64.rpm dotnet-hostfxr-6.0-6.0.5-1.0.1.el9_0.x86_64.rpm dotnet-runtime-6.0-6.0.5-1.0.1.el9_0.x86_64.rpm dotnet-sdk-6.0-6.0.105-1.0.1.el9_0.x86_64.rpm dotnet-targeting-pack-6.0-6.0.5-1.0.1.el9_0.x86_64.rpm dotnet-templates-6.0-6.0.105-1.0.1.el9_0.x86_64.rpm netstandard-targeting-pack-2.1-6.0.105-1.0.1.el9_0.x86_64.rpm dotnet-sdk-6.0-source-built-artifacts-6.0.105-1.0.1.el9_0.x86_64.rpm aarch64: aspnetcore-runtime-6.0-6.0.5-1.0.1.el9_0.aarch64.rpm aspnetcore-targeting-pack-6.0-6.0.5-1.0.1.el9_0.aarch64.rpm dotnet-apphost-pack-6.0-6.0.5-1.0.1.el9_0.aarch64.rpm dotnet-host-6.0.5-1.0.1.el9_0.aarch64.rpm dotnet-hostfxr-6.0-6.0.5-1.0.1.el9_0.aarch64.rpm dotnet-runtime-6.0-6.0.5-1.0.1.el9_0.aarch64.rpm dotnet-sdk-6.0-6.0.105-1.0.1.el9_0.aarch64.rpm dotnet-targeting-pack-6.0-6.0.5-1.0.1.el9_0.aarch64.rpm dotnet-templates-6.0-6.0.105-1.0.1.el9_0.aarch64.rpm netstandard-targeting-pack-2.1-6.0.105-1.0.1.el9_0.aarch64.rpm dotnet-sdk-6.0-source-built-artifacts-6.0.105-1.0.1.el9_0.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol9/SRPMS-updates/dotnet6.0-6.0.105-1.0.1.el9_0.src.rpm Related CVEs: CVE-2022-23267 CVE-2022-29117 CVE-2022-29145 Description of changes: [6.0.105-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.105-1] - Update to .NET SDK 6.0.105 and Runtime 6.0.5 - Resolves: RHBZ#2082268 [6.0.104-1] - Update to .NET SDK 6.0.104 and Runtime 6.0.4 - Resolves: RHBZ#2080460 _______________________________________________ El-errata mailinglist
Update to .NET SDK 6.0.105 and Runtime 6.0.5 This is the May 2022 update for .NET 6. It includes fixes for multiple CVEs, including CVE-2022-29117, CVE-2022-29145 and CVE-2022-23267.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-d69fee9f38 2022-05-21 01:30:10.007912 --------------------------------------------------------------------------------Name : dotnet6.0 Product : Fedora 35 Version : 6.0.105 Release : 1.fc35 URL : https://github.com/dotnet/ Summary : .NET Runtime and SDK Description : .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. --------------------------------------------------------------------------------Update Information: Update to .NET SDK 6.0.105 and Runtime 6.0.5 This is the May 2022 update for .NET 6. It includes fixes for multiple CVEs, including CVE-2022-29117, CVE-2022-29145 and CVE-2022-23267. --------------------------------------------------------------------------------ChangeLog: * Wed May 11 2022 Omair Majid - 6.0.105-1 - Update to .NET SDK 6.0.105 and Runtime 6.0.5 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-d69fee9f38' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Update to .NET SDK 6.0.105 and Runtime 6.0.5 This is the May 2022 update for .NET 6. It includes fixes for multiple CVEs, including CVE-2022-29117, CVE-2022-29145 and CVE-2022-23267.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-256d559f0c 2022-05-21 01:04:59.347208 --------------------------------------------------------------------------------Name : dotnet6.0 Product : Fedora 34 Version : 6.0.105 Release : 1.fc34 URL : https://github.com/dotnet/ Summary : .NET Runtime and SDK Description : .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. --------------------------------------------------------------------------------Update Information: Update to .NET SDK 6.0.105 and Runtime 6.0.5 This is the May 2022 update for .NET 6. It includes fixes for multiple CVEs, including CVE-2022-29117, CVE-2022-29145 and CVE-2022-23267. --------------------------------------------------------------------------------ChangeLog: * Wed May 11 2022 Omair Majid - 6.0.105-1 - Update to .NET SDK 6.0.105 and Runtime 6.0.5 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-256d559f0c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.