[Bug 2058746] Re: Support information in README.source is outdated
This bug was fixed in the package dotnet6 - 6.0.132-0ubuntu1~22.04.1 --- dotnet6 (6.0.132-0ubuntu1~22.04.1) jammy-security; urgency=medium * New upstream release * SECURITY UPDATE: denial of service - CVE-2024-38095: Denial of service in parsing X.509 Content and ObjectIdentifiers. * debian/eng/build-dotnet-tarball.sh: SECURITY_PARTNERS_REPOSITORY connection method updated. -- Nishit Majithia Thu, 04 Jul 2024 10:23:31 +0530 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
This bug was fixed in the package dotnet6 - 6.0.132-0ubuntu1~23.10.1 --- dotnet6 (6.0.132-0ubuntu1~23.10.1) mantic-security; urgency=medium * New upstream release. * SECURITY UPDATE: denial of service - CVE-2024-38095: Denial of service in parsing X.509 Content and ObjectIdentifiers. * debian/eng/build-dotnet-tarball.sh: SECURITY_PARTNERS_REPOSITORY connection method updated. -- Nishit Majithia Wed, 03 Jul 2024 09:25:05 +0530 ** Changed in: dotnet6 (Ubuntu Mantic) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-38095 ** Changed in: dotnet6 (Ubuntu Jammy) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
The debian/README.source file contains the updated support information as required. ** Tags removed: verification-needed verification-needed-jammy verification-needed-mantic ** Tags added: verification-done verification-done-jammy verification-done-mantic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
This bug was fixed in the package dotnet8 - 8.0.105-8.0.5-0ubuntu1~23.10.1 --- dotnet8 (8.0.105-8.0.5-0ubuntu1~23.10.1) mantic-security; urgency=medium * New upstream release * SECURITY UPDATE: stack buffer overflow - CVE-2024-30045: a stack based buffer overflow in the .NET Double Parse routine allows for remote code execution. * SECURITY UPDATE: resource dead-lock - CVE-2024-30046: a dead-lock in Http2OutputProducer.Stop() results in a denial of service. -- Ian Constantin Thu, 09 May 2024 17:16:34 +0300 ** Changed in: dotnet8 (Ubuntu Mantic) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-30045 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-30046 ** Changed in: dotnet8 (Ubuntu Jammy) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
This bug was fixed in the package dotnet8 - 8.0.105-8.0.5-0ubuntu1~22.04.1 --- dotnet8 (8.0.105-8.0.5-0ubuntu1~22.04.1) jammy-security; urgency=medium * New upstream release * SECURITY UPDATE: stack buffer overflow - CVE-2024-30045: a stack based buffer overflow in the .NET Double Parse routine allows for remote code execution. * SECURITY UPDATE: resource dead-lock - CVE-2024-30046: a dead-lock in Http2OutputProducer.Stop() results in a denial of service. -- Ian Constantin Thu, 09 May 2024 17:16:36 +0300 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
the dotnet6 packages slipped through, they had the same .git cruft on them.. ** Changed in: dotnet8 (Ubuntu Jammy) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
Hello Dominik, or anyone else affected, Accepted dotnet6 into mantic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/dotnet6/6.0.129-0ubuntu1~23.10.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- mantic to verification-done-mantic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-mantic. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: dotnet6 (Ubuntu Mantic) Status: New => Fix Committed ** Tags added: verification-needed verification-needed-mantic ** Changed in: dotnet6 (Ubuntu Jammy) Status: New => Fix Committed ** Tags added: verification-needed-jammy -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
Fix was released with the March update. ** Changed in: dotnet6 (Ubuntu) Status: In Progress => Fix Released ** Changed in: dotnet7 (Ubuntu) Status: In Progress => Fix Released ** Changed in: dotnet8 (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2058746] Re: Support information in README.source is outdated
** Changed in: dotnet6 (Ubuntu) Status: Confirmed => In Progress ** Changed in: dotnet7 (Ubuntu) Status: Confirmed => In Progress ** Changed in: dotnet8 (Ubuntu) Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058746 Title: Support information in README.source is outdated To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2058746/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
