REDHAT-BUG-694933: Medium severity mono vulnerability
It was reported [1] that threads in Mono were not properly cleaned up upon finalization, so if one thread was resurrected, it would be possible to see the pointer to freed memory. This could lead to unintended information disclosure, and possibly a crash.
This has been corrected upstream [2].
[1] https://bugzilla.novell.com/showbug.cgi?id=678515 [2] https://github.com/mono/mono/commit/722f9890f09aadfc37ae479e7d946d5fc5ef7b91
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-694933?
The severity of REDHAT-BUG-694933 is considered moderate due to the potential for information disclosure and possible crashes.
How do I fix REDHAT-BUG-694933?
To fix REDHAT-BUG-694933, update your Mono package to the latest version that includes the upstream fix.
What is the impact of REDHAT-BUG-694933?
The impact of REDHAT-BUG-694933 includes the risk of unintended information disclosure and application crashes.
Which software is affected by REDHAT-BUG-694933?
REDHAT-BUG-694933 affects the Mono framework.
Is there a workaround for REDHAT-BUG-694933?
There is no specific workaround for REDHAT-BUG-694933; the recommended action is to apply the software update.