(RHSA-2024:0827) Important: .NET 8.0 security update

2024-02-1507:08:25

access.redhat.com

.net framework

security update

denial of service

signalr server

x509certificate2

cve-2024-21386

cve-2024-21404

cvss score

references

unix

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

dotnet: Denial of Service in SignalR server (CVE-2024-21386)
dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64ledotnet-hostfxr-8.0< 8.0.2-2.el8_9dotnet-hostfxr-8.0-8.0.2-2.el8_9.ppc64le.rpm
RedHat8s390xdotnet-apphost-pack-8.0< 8.0.2-2.el8_9dotnet-apphost-pack-8.0-8.0.2-2.el8_9.s390x.rpm
RedHat8x86_64dotnet-sdk-8.0-source-built-artifacts< 8.0.102-2.el8_9dotnet-sdk-8.0-source-built-artifacts-8.0.102-2.el8_9.x86_64.rpm
RedHat8s390xdotnet-sdk-8.0< 8.0.102-2.el8_9dotnet-sdk-8.0-8.0.102-2.el8_9.s390x.rpm
RedHat8aarch64dotnet-templates-8.0< 8.0.102-2.el8_9dotnet-templates-8.0-8.0.102-2.el8_9.aarch64.rpm
RedHat8s390xdotnet-targeting-pack-8.0< 8.0.2-2.el8_9dotnet-targeting-pack-8.0-8.0.2-2.el8_9.s390x.rpm
RedHat8s390xdotnet-host< 8.0.2-2.el8_9dotnet-host-8.0.2-2.el8_9.s390x.rpm
RedHat8s390xdotnet-templates-8.0< 8.0.102-2.el8_9dotnet-templates-8.0-8.0.102-2.el8_9.s390x.rpm
RedHat8aarch64dotnet-hostfxr-8.0< 8.0.2-2.el8_9dotnet-hostfxr-8.0-8.0.2-2.el8_9.aarch64.rpm
RedHat8aarch64dotnet-sdk-8.0< 8.0.102-2.el8_9dotnet-sdk-8.0-8.0.102-2.el8_9.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	dotnet-hostfxr-8.0	< 8.0.2-2.el8_9	dotnet-hostfxr-8.0-8.0.2-2.el8_9.ppc64le.rpm
RedHat	8	s390x	dotnet-apphost-pack-8.0	< 8.0.2-2.el8_9	dotnet-apphost-pack-8.0-8.0.2-2.el8_9.s390x.rpm
RedHat	8	x86_64	dotnet-sdk-8.0-source-built-artifacts	< 8.0.102-2.el8_9	dotnet-sdk-8.0-source-built-artifacts-8.0.102-2.el8_9.x86_64.rpm
RedHat	8	s390x	dotnet-sdk-8.0	< 8.0.102-2.el8_9	dotnet-sdk-8.0-8.0.102-2.el8_9.s390x.rpm
RedHat	8	aarch64	dotnet-templates-8.0	< 8.0.102-2.el8_9	dotnet-templates-8.0-8.0.102-2.el8_9.aarch64.rpm
RedHat	8	s390x	dotnet-targeting-pack-8.0	< 8.0.2-2.el8_9	dotnet-targeting-pack-8.0-8.0.2-2.el8_9.s390x.rpm
RedHat	8	s390x	dotnet-host	< 8.0.2-2.el8_9	dotnet-host-8.0.2-2.el8_9.s390x.rpm
RedHat	8	s390x	dotnet-templates-8.0	< 8.0.102-2.el8_9	dotnet-templates-8.0-8.0.102-2.el8_9.s390x.rpm
RedHat	8	aarch64	dotnet-hostfxr-8.0	< 8.0.2-2.el8_9	dotnet-hostfxr-8.0-8.0.2-2.el8_9.aarch64.rpm
RedHat	8	aarch64	dotnet-sdk-8.0	< 8.0.102-2.el8_9	dotnet-sdk-8.0-8.0.102-2.el8_9.aarch64.rpm