RHSA-2023:4058: Important: .NET 7.0 security, bug fix, and enhancement update
Published Jul 13, 2023
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219633)Security Fix(es): dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: .NET 7.0 security, bug fix, and enhancement update
Affected Software
96 affected componentsFixes available
redhat/dotnet7.0<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/aspnetcore-targeting-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/dotnet-apphost-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-host<7.0.9-1.el8_8
7.0.9-1.el8_8
redhat/dotnet-host-debuginfo<7.0.9-1.el8_8
7.0.9-1.el8_8
redhat/dotnet-hostfxr<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-runtime<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-runtime<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-sdk<7.0-7.0.109-1.el8_8
7.0-7.0.109-1.el8_8
redhat/dotnet-sdk<7.0-debuginfo-7.0.109-1.el8_8
7.0-debuginfo-7.0.109-1.el8_8
redhat/dotnet-targeting-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-templates<7.0-7.0.109-1.el8_8
7.0-7.0.109-1.el8_8
redhat/dotnet7.0-debuginfo<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/dotnet7.0-debugsource<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/netstandard-targeting-pack<2.1-7.0.109-1.el8_8
2.1-7.0.109-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/aspnetcore-targeting-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/dotnet-apphost-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-host<7.0.9-1.el8_8
7.0.9-1.el8_8
redhat/dotnet-host-debuginfo<7.0.9-1.el8_8
7.0.9-1.el8_8
redhat/dotnet-hostfxr<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-runtime<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-runtime<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-sdk<7.0-7.0.109-1.el8_8
7.0-7.0.109-1.el8_8
redhat/dotnet-sdk<7.0-debuginfo-7.0.109-1.el8_8
7.0-debuginfo-7.0.109-1.el8_8
redhat/dotnet-targeting-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-templates<7.0-7.0.109-1.el8_8
7.0-7.0.109-1.el8_8
redhat/dotnet7.0-debuginfo<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/dotnet7.0-debugsource<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/netstandard-targeting-pack<2.1-7.0.109-1.el8_8
2.1-7.0.109-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/aspnetcore-targeting-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/dotnet-apphost-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-host<7.0.9-1.el8_8
7.0.9-1.el8_8
redhat/dotnet-host-debuginfo<7.0.9-1.el8_8
7.0.9-1.el8_8
redhat/dotnet-hostfxr<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-runtime<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-runtime<7.0-debuginfo-7.0.9-1.el8_8
7.0-debuginfo-7.0.9-1.el8_8
redhat/dotnet-sdk<7.0-7.0.109-1.el8_8
7.0-7.0.109-1.el8_8
redhat/dotnet-sdk<7.0-debuginfo-7.0.109-1.el8_8
7.0-debuginfo-7.0.109-1.el8_8
redhat/dotnet-targeting-pack<7.0-7.0.9-1.el8_8
7.0-7.0.9-1.el8_8
redhat/dotnet-templates<7.0-7.0.109-1.el8_8
7.0-7.0.109-1.el8_8
redhat/dotnet7.0-debuginfo<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/dotnet7.0-debugsource<7.0.109-1.el8_8
7.0.109-1.el8_8
redhat/netstandard-targeting-pack<2.1-7.0.109-1.el8_8
2.1-7.0.109-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.9-1.el8_8.aa
7.0-7.0.9-1.el8_8.aa
redhat/aspnetcore-targeting-pack<7.0-7.0.9-1.el8_8.aa
7.0-7.0.9-1.el8_8.aa
redhat/dotnet<7.0.109-1.el8_8.aa
7.0.109-1.el8_8.aa
redhat/dotnet-apphost-pack<7.0-7.0.9-1.el8_8.aa
7.0-7.0.9-1.el8_8.aa
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.9-1.el8_8.aa
7.0-debuginfo-7.0.9-1.el8_8.aa
redhat/dotnet-host<7.0.9-1.el8_8.aa
7.0.9-1.el8_8.aa
redhat/dotnet-host-debuginfo<7.0.9-1.el8_8.aa
7.0.9-1.el8_8.aa
redhat/dotnet-hostfxr<7.0-7.0.9-1.el8_8.aa
7.0-7.0.9-1.el8_8.aa
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.9-1.el8_8.aa
7.0-debuginfo-7.0.9-1.el8_8.aa
redhat/dotnet-runtime<7.0-7.0.9-1.el8_8.aa
7.0-7.0.9-1.el8_8.aa
redhat/dotnet-runtime<7.0-debuginfo-7.0.9-1.el8_8.aa
7.0-debuginfo-7.0.9-1.el8_8.aa
redhat/dotnet-sdk<7.0-7.0.109-1.el8_8.aa
7.0-7.0.109-1.el8_8.aa
redhat/dotnet-sdk<7.0-debuginfo-7.0.109-1.el8_8.aa
7.0-debuginfo-7.0.109-1.el8_8.aa
redhat/dotnet-targeting-pack<7.0-7.0.9-1.el8_8.aa
7.0-7.0.9-1.el8_8.aa
redhat/dotnet-templates<7.0-7.0.109-1.el8_8.aa
7.0-7.0.109-1.el8_8.aa
redhat/dotnet7.0-debuginfo<7.0.109-1.el8_8.aa
7.0.109-1.el8_8.aa
redhat/dotnet7.0-debugsource<7.0.109-1.el8_8.aa
7.0.109-1.el8_8.aa
redhat/netstandard-targeting-pack<2.1-7.0.109-1.el8_8.aa
2.1-7.0.109-1.el8_8.aa
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.109-1.el8_8
7.0-source-built-artifacts-7.0.109-1.el8_8
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.109-1.el8_8
7.0-source-built-artifacts-7.0.109-1.el8_8
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.109-1.el8_8.aa
7.0-source-built-artifacts-7.0.109-1.el8_8.aa
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.109-1.el8_8
7.0-source-built-artifacts-7.0.109-1.el8_8
Red Hat Red Hat CodeReady Linux Builder for ARM 64
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat CodeReady Linux Builder for x86_64
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems
Remediation
Event History
Jul 13, 2023
Advisory Published
via Red Hat·12:00 AM
Advisory Published
07:27 AM
Frequently Asked Questions
1
What is the severity of RHSA-2023:4058?
The severity of RHSA-2023:4058 is classified as important.
2
How do I fix RHSA-2023:4058?
To address RHSA-2023:4058, you need to upgrade to the patched package versions including dotnet and aspnetcore-runtime as specified in the advisory.
3
Which products are affected by RHSA-2023:4058?
RHSA-2023:4058 impacts several Red Hat products including Red Hat Enterprise Linux and CodeReady Linux Builder across different architectures.
4
What does RHSA-2023:4058 address?
RHSA-2023:4058 addresses security vulnerabilities along with bug fixes and enhancements in .NET 7.0.
5
When should I apply the updates for RHSA-2023:4058?
It is recommended to apply the updates for RHSA-2023:4058 as soon as possible to mitigate potential security risks.