Ubuntu
dotnet7 package

dotnet7 7.0.107-0ubuntu1~22.04.1 source package in Ubuntu

Changelog

dotnet7 (7.0.107-0ubuntu1~22.04.1) jammy-security; urgency=medium

  * New upstream release.
  * SECURITY UPDATE: elevation of privilege
    - CVE-2023-24936: Bypass restrictions when deserializing a DataSet or
      DataTable from XML.
  * SECURITY UPDATE: denial of service
    - CVE-2023-29331: When a .NET application is internet-facing and accepts
      an X509 client certificate for mutual TLS, a malicious client certificate
      can cause unbounded CPU usage.
  * SECURITY UPDATE: remote code exection
    - CVE-2023-29337: A vulnerability exists in NuGet where a potential race
      condition can lead to a symlink attack.
  * SECURITY UPDATE: elevation of privilege
    - CVE-2023-32032: TarFile.ExtractToDirectory ignores extraction directory
      argument.
  * SECURITY UPDATE: remote code execution
    - CVE-2023-33128: An issue in source generators can lead to a crash due to
      unmanaged heap corruption.
  * debian/patches/add-kinetic-rids.patch: removed due to inclusion upstream.

  [ Dominik Viererbe ]
  * d/t: extended autopkgtest:
    * essential-binaries-and-config-files-should-be-present
    * cli-metadata-should-be-correct
    * global-json-should-be-detected
    * console-template-should-build-and-run
    * dotnet-help-should-show-output
    * dotnet-project-management-cli-should-work
    * example-fsharp-script-output-should-equal-expected-values
    * building-hello-world-for-all-supported-rids-should-work
    * dotnet-xunit-tests-should-work
    * nuget-cli-should-be-able-to-consume-packages-from-nuget-gallery
    * crossbuild-for-windows-x64-should-run
    * dotnet6-and-dotnet7-should-work-together

 -- Ian Constantin <email address hidden>  Fri, 02 Jun 2023 22:20:12 +0300

Upload details

Uploaded by:
Ian Constantin
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
amd64 arm64
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Jammy: [FULLYBUILT] amd64 [FULLYBUILT] arm64

Downloads

File Size SHA-256 Checksum
dotnet7_7.0.107.orig.tar.xz 326.7 MiB 144262b0938d6abc125a96ad1ff6c22865d8574d9e2f34eefd0eb6dae53931a9
dotnet7_7.0.107-0ubuntu1~22.04.1.debian.tar.xz 44.2 KiB 5c7f2a9f143e1ac398313c9dcd14e5c20e1f9d232462a3f7c0f2bca499f7b9f3
dotnet7_7.0.107-0ubuntu1~22.04.1.dsc 2.8 KiB ff9a0a2ec8d159899fb6ef9ff323dd0296aceb21cc005e49b36923db8451f0e8

View changes file

Binary packages built by this source

aspnetcore-runtime-7.0: ASP dotNET Core runtime

 The ASP dotNET Core runtime contains everything needed to run dotNet
 web applications. It includes a high performance Virtual Machine as
 well as the framework libraries used by dotNet applications.
 .
 ASP dotNET Core is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

aspnetcore-targeting-pack-7.0: Internal - targeting pack for Microsoft.AspNetCore.App 7.0

 This package provides a targeting pack for Microsoft.AspNetCore.App 7.0
 that allows developers to compile against and target
 Microsoft.AspNetCore.App 7.0 applications using the .NET SDK.
 This are not meant for general use.

dotnet-apphost-pack-7.0: Internal - targeting pack for Microsoft.NETCore.App 7.0

 This package provides a targeting pack for Microsoft.NETCore.App 7.0
 that allows developers to compile against and target Microsoft.NETCore.App 7.0
 applications using the .NET SDK. This not meant for general use.

dotnet-apphost-pack-7.0-dbgsym: debug symbols for dotnet-apphost-pack-7.0
dotnet-host-7.0: dotNET host command line

 The dotNET host is a command line program that runs a standalone
 dotNET application or launches the SDK.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet-host-7.0-dbgsym: debug symbols for dotnet-host-7.0
dotnet-hostfxr-7.0: dotNET host resolver

 The dotNET host resolver contains the logic to resolve and select
 the right version of the dotNet SDK or runtime to use.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet-hostfxr-7.0-dbgsym: debug symbols for dotnet-hostfxr-7.0
dotnet-runtime-7.0: dotNET runtime

 The dotNET runtime contains everything needed to run dotNet applications.
 It includes a high performance Virtual Machine as well as the framework
 libraries used by dotNet applications.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet-runtime-7.0-dbgsym: debug symbols for dotnet-runtime-7.0
dotnet-sdk-7.0: dotNET 7.0 Software Development Kit

 The dotNET SDK is a collection of command line applications to
 create, build, publish and run dotNet applications.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet-sdk-7.0-dbgsym: debug symbols for dotnet-sdk-7.0
dotnet-sdk-7.0-source-built-artifacts: Internal package for building dotNet 7.0 Software Development Kit

 The dotNET source-built archive is a collection of packages needed
 to build the dotNET SDK itself.
 .
 These are not meant for general use.

dotnet-targeting-pack-7.0: Internal - targeting pack for Microsoft.NETCore.App 7.0

 This package provides a targeting pack for Microsoft.NETCore.App 7.0
 that allows developers to compile against and target Microsoft.NETCore.App 7.0
 applications using the .NET SDK. This are not meant for general use.

dotnet-templates-7.0: dotNET 7.0 templates

 This package contains templates used by the dotNet SDK.
 .
 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.

dotnet7: dotNET CLI tools and runtime

 dotNET is a fast, lightweight and modular platform for creating
 cross platform applications that work on GNU/Linux, macOS and Windows.
 .
 It particularly focuses on creating console applications, web
 applications and micro-services.
 .
 dotNET contains a runtime conforming to dotNET Standards a set of
 framework libraries, an SDK containing compilers and a 'dotnet'
 application to drive everything.

netstandard-targeting-pack-2.1-7.0: Internal - targeting pack for NETStandard.Library 2.1

 This package provides a targeting pack for NETStandard.Library 2.1
 that allows developers to compile against and target NETStandard.Library 2.1
 applications using the .NET SDK.
 This are not meant for general use.