RHSA-2023:5144: Moderate: .NET 6.0 security update
Published Sep 13, 2023
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22.Security Fix(es): dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
60 affected componentsFixes available
redhat/dotnet6.0<6.0.122-1.el8_8
6.0.122-1.el8_8
redhat/aspnetcore-runtime<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/aspnetcore-targeting-pack<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-apphost-pack<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.22-1.el8_8
6.0-debuginfo-6.0.22-1.el8_8
redhat/dotnet-hostfxr<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.22-1.el8_8
6.0-debuginfo-6.0.22-1.el8_8
redhat/dotnet-runtime<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-runtime<6.0-debuginfo-6.0.22-1.el8_8
6.0-debuginfo-6.0.22-1.el8_8
redhat/dotnet-sdk<6.0-6.0.122-1.el8_8
6.0-6.0.122-1.el8_8
redhat/dotnet-sdk<6.0-debuginfo-6.0.122-1.el8_8
6.0-debuginfo-6.0.122-1.el8_8
redhat/dotnet-targeting-pack<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-templates<6.0-6.0.122-1.el8_8
6.0-6.0.122-1.el8_8
redhat/dotnet6.0-debuginfo<6.0.122-1.el8_8
6.0.122-1.el8_8
redhat/dotnet6.0-debugsource<6.0.122-1.el8_8
6.0.122-1.el8_8
redhat/aspnetcore-runtime<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/aspnetcore-targeting-pack<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-apphost-pack<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.22-1.el8_8
6.0-debuginfo-6.0.22-1.el8_8
redhat/dotnet-hostfxr<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.22-1.el8_8
6.0-debuginfo-6.0.22-1.el8_8
redhat/dotnet-runtime<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-runtime<6.0-debuginfo-6.0.22-1.el8_8
6.0-debuginfo-6.0.22-1.el8_8
redhat/dotnet-sdk<6.0-6.0.122-1.el8_8
6.0-6.0.122-1.el8_8
redhat/dotnet-sdk<6.0-debuginfo-6.0.122-1.el8_8
6.0-debuginfo-6.0.122-1.el8_8
redhat/dotnet-targeting-pack<6.0-6.0.22-1.el8_8
6.0-6.0.22-1.el8_8
redhat/dotnet-templates<6.0-6.0.122-1.el8_8
6.0-6.0.122-1.el8_8
redhat/dotnet6.0-debuginfo<6.0.122-1.el8_8
6.0.122-1.el8_8
redhat/dotnet6.0-debugsource<6.0.122-1.el8_8
6.0.122-1.el8_8
redhat/aspnetcore-runtime<6.0-6.0.22-1.el8_8.aa
6.0-6.0.22-1.el8_8.aa
redhat/aspnetcore-targeting-pack<6.0-6.0.22-1.el8_8.aa
6.0-6.0.22-1.el8_8.aa
redhat/dotnet-apphost-pack<6.0-6.0.22-1.el8_8.aa
6.0-6.0.22-1.el8_8.aa
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.22-1.el8_8.aa
6.0-debuginfo-6.0.22-1.el8_8.aa
redhat/dotnet-hostfxr<6.0-6.0.22-1.el8_8.aa
6.0-6.0.22-1.el8_8.aa
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.22-1.el8_8.aa
6.0-debuginfo-6.0.22-1.el8_8.aa
redhat/dotnet-runtime<6.0-6.0.22-1.el8_8.aa
6.0-6.0.22-1.el8_8.aa
redhat/dotnet-runtime<6.0-debuginfo-6.0.22-1.el8_8.aa
6.0-debuginfo-6.0.22-1.el8_8.aa
redhat/dotnet-sdk<6.0-6.0.122-1.el8_8.aa
6.0-6.0.122-1.el8_8.aa
redhat/dotnet-sdk<6.0-debuginfo-6.0.122-1.el8_8.aa
6.0-debuginfo-6.0.122-1.el8_8.aa
redhat/dotnet-targeting-pack<6.0-6.0.22-1.el8_8.aa
6.0-6.0.22-1.el8_8.aa
redhat/dotnet-templates<6.0-6.0.122-1.el8_8.aa
6.0-6.0.122-1.el8_8.aa
redhat/dotnet6.0-debuginfo<6.0.122-1.el8_8.aa
6.0.122-1.el8_8.aa
redhat/dotnet6.0-debugsource<6.0.122-1.el8_8.aa
6.0.122-1.el8_8.aa
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.122-1.el8_8
6.0-source-built-artifacts-6.0.122-1.el8_8
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.122-1.el8_8
6.0-source-built-artifacts-6.0.122-1.el8_8
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.122-1.el8_8.aa
6.0-source-built-artifacts-6.0.122-1.el8_8.aa
Red Hat Red Hat CodeReady Linux Builder for ARM 64
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat CodeReady Linux Builder for x86_64
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems
Remediation
Event History
Sep 13, 2023
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
02:26 PM
Frequently Asked Questions
1
What is the severity of RHSA-2023:5144?
The severity of RHSA-2023:5144 is classified as moderate.
2
How do I fix RHSA-2023:5144?
To fix RHSA-2023:5144, update to the latest versions of the affected packages including dotnet6.0-6.0.122-1.el8_8.
3
Which software is affected by RHSA-2023:5144?
RHSA-2023:5144 affects various Red Hat products, including Red Hat Enterprise Linux and CodeReady Linux Builder.
4
What are some affected packages in RHSA-2023:5144?
Affected packages include dotnet-sdk, dotnet-runtime, and aspnetcore-runtime among others.
5
When was RHSA-2023:5144 issued?
RHSA-2023:5144 was issued to address security vulnerabilities in .NET 6.0.