.NET Core Security vulnerability discovery on standalone orchestration installation

Help Orchestrator
,
1

Hello,
My organization installed standalone orchestrator(v22.4) in AWS EC2 instance.
Microsoft windows server 2016 (t3.xlarge).
During the installation, installed .NET Core 6.0.10. A recent security vulnerability has just been published “Security Update for Microsoft .NET Core (August 2023)” which was flagged in our orchestrator server and we need to fix it.
Meanwhile, from UiPath orchestrator software prerequisites, it is still listing 3.1.13 & 6.0 as required .NET Core versions. According to the received security summary, the resolution is in .NET Core 6.0.21, however, .NET Core 7.0 is available and I will like to know if this version (7.0) supports orchestrator 22.4 standalone installation.
This is a high risk finding, that needs to be resolved immediately.

Thanks.

2

@dari_donkuro

4.7+ should support 22.4 …ideally installing 7.0 should not be an issue…as 4.7 is the minimum requirement

IMG_6230
IMG_6230828×753 114 KB

https://docs.uipath.com/orchestrator/standalone/2022.4/installation-guide/orchestrator-prerequisites-for-installation

Cheers