Important: dotnet8.0 security update

🗓️ 10 Jul 2024 00:00:00Reported by AlmaLinuxType

almalinux🔗 errata.almalinux.org👁 47 Views

Update for dotnet8.0 securit

Reporter	Title	Published	Views	Family All 204
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.15.0 IF001	31 Jul 202409:07	–	ibm
IBM Security Bulletins	Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in System.formats.asn - Denial of Service	19 Oct 202614:22	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft .NET affects IBM Robotic Process Automation and may lead to a denial of service (CVE-2024-30105).	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft .NET affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-38095).	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in .NET affect IBM Robotic Process Automation	16 Jan 202616:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	15 Apr 202503:59	–	ibm
attackerkb	CVE-2024-35264	9 Jul 202417:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-685)	6 Aug 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2024-686)	6 Aug 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : dotnet6.0 (ALSA-2024:4438)	11 Jul 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	9	aarch64	dotnet-runtime-dbg-8.0	8.0.7-1.el9_4	dotnet-runtime-dbg-8.0-8.0.7-1.el9_4.aarch64.rpm
almalinux	9	aarch64	aspnetcore-runtime-8.0	8.0.7-1.el9_4	aspnetcore-runtime-8.0-8.0.7-1.el9_4.aarch64.rpm
almalinux	9	aarch64	dotnet-hostfxr-8.0	8.0.7-1.el9_4	dotnet-hostfxr-8.0-8.0.7-1.el9_4.aarch64.rpm
almalinux	9	aarch64	dotnet-host	8.0.7-1.el9_4	dotnet-host-8.0.7-1.el9_4.aarch64.rpm
almalinux	9	aarch64	dotnet-apphost-pack-8.0	8.0.7-1.el9_4	dotnet-apphost-pack-8.0-8.0.7-1.el9_4.aarch64.rpm
almalinux	9	aarch64	dotnet-templates-8.0	8.0.107-1.el9_4	dotnet-templates-8.0-8.0.107-1.el9_4.aarch64.rpm
almalinux	9	aarch64	netstandard-targeting-pack-2.1	8.0.107-1.el9_4	netstandard-targeting-pack-2.1-8.0.107-1.el9_4.aarch64.rpm
almalinux	9	aarch64	aspnetcore-runtime-dbg-8.0	8.0.7-1.el9_4	aspnetcore-runtime-dbg-8.0-8.0.7-1.el9_4.aarch64.rpm
almalinux	9	aarch64	dotnet-sdk-8.0	8.0.107-1.el9_4	dotnet-sdk-8.0-8.0.107-1.el9_4.aarch64.rpm
almalinux	9	aarch64	dotnet-runtime-8.0	8.0.7-1.el9_4	dotnet-runtime-8.0-8.0.7-1.el9_4.aarch64.rpm

Source	Link
access	www.access.redhat.com/errata/RHSA-2024:4450
access	www.access.redhat.com/security/cve/CVE-2024-30105
access	www.access.redhat.com/security/cve/CVE-2024-35264
access	www.access.redhat.com/security/cve/CVE-2024-38095
bugzilla	www.bugzilla.redhat.com/2295320
bugzilla	www.bugzilla.redhat.com/2295321
bugzilla	www.bugzilla.redhat.com/2295323
errata	www.errata.almalinux.org/9/ALSA-2024-4450.html

11 Jul 2024 08:47Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.1

EPSS0.02939

SSVC

dotnet security update cve system.text.json asp.net core x.509 content objectidentifiers sdk 8.0.107 runtime 8.0.7 vulnerability clr.