Lucene search
AlmaLinuxALSA-2021:3142HistoryAug 11, 2021 - 6:21 p.m.
Important: .NET Core 3.1 security and bugfix update
2021-08-1118:21:49
errata.almalinux.org
16
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.118 and .NET Runtime 3.1.18.
Security Fix(es):
-
dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)
-
dotnet: Dump file created world-readable (CVE-2021-34485)
-
dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | x86_64 | aspnetcore-runtime-3.1 | < 3.1.18-1.el8_4 | aspnetcore-runtime-3.1-3.1.18-1.el8_4.x86_64.rpm |
| almalinux | 8 | x86_64 | aspnetcore-targeting-pack-3.1 | < 3.1.18-1.el8_4 | aspnetcore-targeting-pack-3.1-3.1.18-1.el8_4.x86_64.rpm |
| almalinux | 8 | x86_64 | dotnet-apphost-pack-3.1 | < 3.1.18-1.el8_4 | dotnet-apphost-pack-3.1-3.1.18-1.el8_4.x86_64.rpm |
| almalinux | 8 | x86_64 | dotnet-hostfxr-3.1 | < 3.1.18-1.el8_4 | dotnet-hostfxr-3.1-3.1.18-1.el8_4.x86_64.rpm |
| almalinux | 8 | x86_64 | dotnet-runtime-3.1 | < 3.1.18-1.el8_4 | dotnet-runtime-3.1-3.1.18-1.el8_4.x86_64.rpm |
| almalinux | 8 | x86_64 | dotnet-sdk-3.1 | < 3.1.118-1.el8_4 | dotnet-sdk-3.1-3.1.118-1.el8_4.x86_64.rpm |
| almalinux | 8 | x86_64 | dotnet-targeting-pack-3.1 | < 3.1.18-1.el8_4 | dotnet-targeting-pack-3.1-3.1.18-1.el8_4.x86_64.rpm |
| almalinux | 8 | x86_64 | dotnet-templates-3.1 | < 3.1.118-1.el8_4 | dotnet-templates-3.1-3.1.118-1.el8_4.x86_64.rpm |
Related
nessus
nessus
CentOS 8 : .NET Core 3.1 (CESA-2021:3142)
2021-08-16 00:00:00
Rocky Linux 8 : .NET Core 3.1 (RLSA-2021:3142)
2022-02-09 00:00:00
RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2021:3143)
2021-08-16 00:00:00
oraclelinux
oraclelinux
.NET 5.0 security and bugfix update
2021-08-13 00:00:00
.NET Core 3.1 security and bugfix update
2021-08-13 00:00:00
.NET Core 2.1 security and bugfix update
2021-08-12 00:00:00
redhat
redhat
(RHSA-2021:3142) Important: .NET Core 3.1 security and bugfix update
2021-08-11 18:21:49
(RHSA-2021:3148) Important: .NET 5.0 security and bugfix update
2021-08-12 06:29:43
rocky
rocky
.NET 5.0 security and bugfix update
2021-08-12 21:05:09
.NET Core 3.1 security and bugfix update
2021-08-12 20:59:59
.NET Core 2.1 security and bugfix update
2021-08-12 20:54:48
kaspersky
kaspersky
KLA12257 Multiple vulnerabilities in Microsoft Developer Tools
2021-08-10 00:00:00
almalinux
almalinux
Important: .NET 5.0 security and bugfix update
2021-08-12 06:29:43
Low: .NET Core 2.1 security and bugfix update
2021-08-11 18:43:42
altlinux
altlinux
openvas
openvas
prion
prion
Information disclosure
2021-08-12 18:15:00
Information disclosure
2021-08-12 18:15:00
Denial of service
2021-08-12 18:15:00
cve
cve
veracode
veracode
Information Disclosure
2021-08-26 05:02:39
osv
osv
ASP.NET Core Information Disclosure Vulnerability
2021-08-25 14:45:28
CVE-2021-34532
2021-08-12 18:15:09
BIT-dotnet-2021-26423
2024-03-06 10:59:59
github
github
ASP.NET Core Information Disclosure Vulnerability
2021-08-25 14:45:28
.NET Core Information Disclosure Vulnerability
2022-10-20 21:34:09
.NET Core Elevation of Privilege Vulnerability
2022-10-25 17:33:12
redhatcve
redhatcve
mscve
mscve
.NET Core and Visual Studio Denial of Service Vulnerability
2021-08-10 07:00:00
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
2021-08-10 07:00:00
.NET Core and Visual Studio Information Disclosure Vulnerability
2021-08-10 07:00:00
qualysblog
qualysblog
ibm
ibm
rapid7blog
rapid7blog
Patch Tuesday - August 2021
2021-08-11 03:19:33
Related for ALSA-2021:3142