(RHSA-2024:0808) Important: dotnet6.0 security update

2024-02-1318:16:37

access.redhat.com

.net framework

managed software

security vulnerability

denial of service

signalr server

x509certificate2

cve-2024-21386

cve-2024-21404

cvss score

references

unix

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.

Security Fix(es):

dotnet: Denial of Service in SignalR server (CVE-2024-21386)
dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64dotnet-apphost-pack-6.0< 6.0.27-1.el8_9dotnet-apphost-pack-6.0-6.0.27-1.el8_9.x86_64.rpm
RedHat8s390xaspnetcore-targeting-pack-6.0< 6.0.27-1.el8_9aspnetcore-targeting-pack-6.0-6.0.27-1.el8_9.s390x.rpm
RedHat8s390xdotnet-hostfxr-6.0-debuginfo< 6.0.27-1.el8_9dotnet-hostfxr-6.0-debuginfo-6.0.27-1.el8_9.s390x.rpm
RedHat8aarch64dotnet-hostfxr-6.0< 6.0.27-1.el8_9dotnet-hostfxr-6.0-6.0.27-1.el8_9.aarch64.rpm
RedHat8s390xdotnet6.0-debugsource< 6.0.127-1.el8_9dotnet6.0-debugsource-6.0.127-1.el8_9.s390x.rpm
RedHat8aarch64dotnet6.0-debuginfo< 6.0.127-1.el8_9dotnet6.0-debuginfo-6.0.127-1.el8_9.aarch64.rpm
RedHat8s390xdotnet-hostfxr-6.0< 6.0.27-1.el8_9dotnet-hostfxr-6.0-6.0.27-1.el8_9.s390x.rpm
RedHat8aarch64dotnet-apphost-pack-6.0< 6.0.27-1.el8_9dotnet-apphost-pack-6.0-6.0.27-1.el8_9.aarch64.rpm
RedHat8s390xaspnetcore-runtime-6.0< 6.0.27-1.el8_9aspnetcore-runtime-6.0-6.0.27-1.el8_9.s390x.rpm
RedHat8x86_64dotnet-sdk-6.0-debuginfo< 6.0.127-1.el8_9dotnet-sdk-6.0-debuginfo-6.0.127-1.el8_9.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	x86_64	dotnet-apphost-pack-6.0	< 6.0.27-1.el8_9	dotnet-apphost-pack-6.0-6.0.27-1.el8_9.x86_64.rpm
RedHat	8	s390x	aspnetcore-targeting-pack-6.0	< 6.0.27-1.el8_9	aspnetcore-targeting-pack-6.0-6.0.27-1.el8_9.s390x.rpm
RedHat	8	s390x	dotnet-hostfxr-6.0-debuginfo	< 6.0.27-1.el8_9	dotnet-hostfxr-6.0-debuginfo-6.0.27-1.el8_9.s390x.rpm
RedHat	8	aarch64	dotnet-hostfxr-6.0	< 6.0.27-1.el8_9	dotnet-hostfxr-6.0-6.0.27-1.el8_9.aarch64.rpm
RedHat	8	s390x	dotnet6.0-debugsource	< 6.0.127-1.el8_9	dotnet6.0-debugsource-6.0.127-1.el8_9.s390x.rpm
RedHat	8	aarch64	dotnet6.0-debuginfo	< 6.0.127-1.el8_9	dotnet6.0-debuginfo-6.0.127-1.el8_9.aarch64.rpm
RedHat	8	s390x	dotnet-hostfxr-6.0	< 6.0.27-1.el8_9	dotnet-hostfxr-6.0-6.0.27-1.el8_9.s390x.rpm
RedHat	8	aarch64	dotnet-apphost-pack-6.0	< 6.0.27-1.el8_9	dotnet-apphost-pack-6.0-6.0.27-1.el8_9.aarch64.rpm
RedHat	8	s390x	aspnetcore-runtime-6.0	< 6.0.27-1.el8_9	aspnetcore-runtime-6.0-6.0.27-1.el8_9.s390x.rpm
RedHat	8	x86_64	dotnet-sdk-6.0-debuginfo	< 6.0.127-1.el8_9	dotnet-sdk-6.0-debuginfo-6.0.127-1.el8_9.x86_64.rpm