RHSA-2023:4059: Important: .NET 6.0 security, bug fix, and enhancement update
Published Jul 13, 2023
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219639)Security Fix(es): dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: .NET 6.0 security, bug fix, and enhancement update
Affected Software
60 affected componentsFixes available
redhat/dotnet6.0<6.0.120-1.el8_8
6.0.120-1.el8_8
redhat/aspnetcore-runtime<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/aspnetcore-targeting-pack<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-apphost-pack<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.20-1.el8_8
6.0-debuginfo-6.0.20-1.el8_8
redhat/dotnet-hostfxr<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.20-1.el8_8
6.0-debuginfo-6.0.20-1.el8_8
redhat/dotnet-runtime<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-runtime<6.0-debuginfo-6.0.20-1.el8_8
6.0-debuginfo-6.0.20-1.el8_8
redhat/dotnet-sdk<6.0-6.0.120-1.el8_8
6.0-6.0.120-1.el8_8
redhat/dotnet-sdk<6.0-debuginfo-6.0.120-1.el8_8
6.0-debuginfo-6.0.120-1.el8_8
redhat/dotnet-targeting-pack<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-templates<6.0-6.0.120-1.el8_8
6.0-6.0.120-1.el8_8
redhat/dotnet6.0-debuginfo<6.0.120-1.el8_8
6.0.120-1.el8_8
redhat/dotnet6.0-debugsource<6.0.120-1.el8_8
6.0.120-1.el8_8
redhat/aspnetcore-runtime<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/aspnetcore-targeting-pack<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-apphost-pack<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.20-1.el8_8
6.0-debuginfo-6.0.20-1.el8_8
redhat/dotnet-hostfxr<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.20-1.el8_8
6.0-debuginfo-6.0.20-1.el8_8
redhat/dotnet-runtime<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-runtime<6.0-debuginfo-6.0.20-1.el8_8
6.0-debuginfo-6.0.20-1.el8_8
redhat/dotnet-sdk<6.0-6.0.120-1.el8_8
6.0-6.0.120-1.el8_8
redhat/dotnet-sdk<6.0-debuginfo-6.0.120-1.el8_8
6.0-debuginfo-6.0.120-1.el8_8
redhat/dotnet-targeting-pack<6.0-6.0.20-1.el8_8
6.0-6.0.20-1.el8_8
redhat/dotnet-templates<6.0-6.0.120-1.el8_8
6.0-6.0.120-1.el8_8
redhat/dotnet6.0-debuginfo<6.0.120-1.el8_8
6.0.120-1.el8_8
redhat/dotnet6.0-debugsource<6.0.120-1.el8_8
6.0.120-1.el8_8
redhat/aspnetcore-runtime<6.0-6.0.20-1.el8_8.aa
6.0-6.0.20-1.el8_8.aa
redhat/aspnetcore-targeting-pack<6.0-6.0.20-1.el8_8.aa
6.0-6.0.20-1.el8_8.aa
redhat/dotnet-apphost-pack<6.0-6.0.20-1.el8_8.aa
6.0-6.0.20-1.el8_8.aa
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.20-1.el8_8.aa
6.0-debuginfo-6.0.20-1.el8_8.aa
redhat/dotnet-hostfxr<6.0-6.0.20-1.el8_8.aa
6.0-6.0.20-1.el8_8.aa
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.20-1.el8_8.aa
6.0-debuginfo-6.0.20-1.el8_8.aa
redhat/dotnet-runtime<6.0-6.0.20-1.el8_8.aa
6.0-6.0.20-1.el8_8.aa
redhat/dotnet-runtime<6.0-debuginfo-6.0.20-1.el8_8.aa
6.0-debuginfo-6.0.20-1.el8_8.aa
redhat/dotnet-sdk<6.0-6.0.120-1.el8_8.aa
6.0-6.0.120-1.el8_8.aa
redhat/dotnet-sdk<6.0-debuginfo-6.0.120-1.el8_8.aa
6.0-debuginfo-6.0.120-1.el8_8.aa
redhat/dotnet-targeting-pack<6.0-6.0.20-1.el8_8.aa
6.0-6.0.20-1.el8_8.aa
redhat/dotnet-templates<6.0-6.0.120-1.el8_8.aa
6.0-6.0.120-1.el8_8.aa
redhat/dotnet6.0-debuginfo<6.0.120-1.el8_8.aa
6.0.120-1.el8_8.aa
redhat/dotnet6.0-debugsource<6.0.120-1.el8_8.aa
6.0.120-1.el8_8.aa
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.120-1.el8_8
6.0-source-built-artifacts-6.0.120-1.el8_8
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.120-1.el8_8.aa
6.0-source-built-artifacts-6.0.120-1.el8_8.aa
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.120-1.el8_8
6.0-source-built-artifacts-6.0.120-1.el8_8
Red Hat Red Hat CodeReady Linux Builder for ARM 64
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems
Remediation
Event History
Jul 13, 2023
Advisory Published
07:27 AM
Jul 14, 2024
Advisory Published
via Red Hat·02:22 AM
Frequently Asked Questions
1
What is the severity of RHSA-2023:4059?
RHSA-2023:4059 is classified as Important.
2
What packages are affected by RHSA-2023:4059?
Affected packages include dotnet6.0, aspnetcore-runtime, dotnet-sdk, and several others from Red Hat.
3
How do I fix RHSA-2023:4059?
You can resolve RHSA-2023:4059 by updating the affected packages to the recommended versions provided by Red Hat.
4
What vulnerabilities does RHSA-2023:4059 address?
RHSA-2023:4059 addresses security vulnerabilities and provides bug fixes and enhancements for .NET 6.0.
5
Is RHSA-2023:4059 applicable to my Red Hat system?
RHSA-2023:4059 is applicable to Red Hat Enterprise Linux systems using the specified versions of .NET products.