RHSA-2024:0827: Important: .NET 8.0 security update
Published Feb 15, 2024
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.<br>New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.<br>Security Fix(es):<br><li> dotnet: Denial of Service in SignalR server (CVE-2024-21386)</li> <li> dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
97 affected componentsFixes available
redhat/dotnet8.0<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/aspnetcore-runtime<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/aspnetcore-runtime-dbg<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/aspnetcore-targeting-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/dotnet-apphost-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-apphost-pack<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-host<8.0.2-2.el8_9
8.0.2-2.el8_9
redhat/dotnet-host-debuginfo<8.0.2-2.el8_9
8.0.2-2.el8_9
redhat/dotnet-hostfxr<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-hostfxr<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-runtime<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-runtime<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-runtime-dbg<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-sdk<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet-sdk<8.0-debuginfo-8.0.102-2.el8_9
8.0-debuginfo-8.0.102-2.el8_9
redhat/dotnet-sdk-dbg<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet-targeting-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-templates<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet8.0-debuginfo<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/dotnet8.0-debugsource<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/netstandard-targeting-pack<2.1-8.0.102-2.el8_9
2.1-8.0.102-2.el8_9
redhat/aspnetcore-runtime<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/aspnetcore-runtime-dbg<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/aspnetcore-targeting-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/dotnet-apphost-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-apphost-pack<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-host<8.0.2-2.el8_9
8.0.2-2.el8_9
redhat/dotnet-host-debuginfo<8.0.2-2.el8_9
8.0.2-2.el8_9
redhat/dotnet-hostfxr<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-hostfxr<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-runtime<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-runtime<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-runtime-dbg<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-sdk<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet-sdk<8.0-debuginfo-8.0.102-2.el8_9
8.0-debuginfo-8.0.102-2.el8_9
redhat/dotnet-sdk-dbg<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet-targeting-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-templates<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet8.0-debuginfo<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/dotnet8.0-debugsource<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/netstandard-targeting-pack<2.1-8.0.102-2.el8_9
2.1-8.0.102-2.el8_9
redhat/aspnetcore-runtime<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/aspnetcore-runtime-dbg<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/aspnetcore-targeting-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/dotnet-apphost-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-apphost-pack<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-host<8.0.2-2.el8_9
8.0.2-2.el8_9
redhat/dotnet-host-debuginfo<8.0.2-2.el8_9
8.0.2-2.el8_9
redhat/dotnet-hostfxr<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-hostfxr<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-runtime<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-runtime<8.0-debuginfo-8.0.2-2.el8_9
8.0-debuginfo-8.0.2-2.el8_9
redhat/dotnet-runtime-dbg<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-sdk<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet-sdk<8.0-debuginfo-8.0.102-2.el8_9
8.0-debuginfo-8.0.102-2.el8_9
redhat/dotnet-sdk-dbg<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet-targeting-pack<8.0-8.0.2-2.el8_9
8.0-8.0.2-2.el8_9
redhat/dotnet-templates<8.0-8.0.102-2.el8_9
8.0-8.0.102-2.el8_9
redhat/dotnet8.0-debuginfo<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/dotnet8.0-debugsource<8.0.102-2.el8_9
8.0.102-2.el8_9
redhat/netstandard-targeting-pack<2.1-8.0.102-2.el8_9
2.1-8.0.102-2.el8_9
redhat/aspnetcore-runtime<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/aspnetcore-runtime-dbg<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/aspnetcore-targeting-pack<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/dotnet<8.0.102-2.el8_9.aa
8.0.102-2.el8_9.aa
redhat/dotnet-apphost-pack<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/dotnet-apphost-pack<8.0-debuginfo-8.0.2-2.el8_9.aa
8.0-debuginfo-8.0.2-2.el8_9.aa
redhat/dotnet-host<8.0.2-2.el8_9.aa
8.0.2-2.el8_9.aa
redhat/dotnet-host-debuginfo<8.0.2-2.el8_9.aa
8.0.2-2.el8_9.aa
redhat/dotnet-hostfxr<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/dotnet-hostfxr<8.0-debuginfo-8.0.2-2.el8_9.aa
8.0-debuginfo-8.0.2-2.el8_9.aa
redhat/dotnet-runtime<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/dotnet-runtime<8.0-debuginfo-8.0.2-2.el8_9.aa
8.0-debuginfo-8.0.2-2.el8_9.aa
redhat/dotnet-runtime-dbg<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/dotnet-sdk<8.0-8.0.102-2.el8_9.aa
8.0-8.0.102-2.el8_9.aa
redhat/dotnet-sdk<8.0-debuginfo-8.0.102-2.el8_9.aa
8.0-debuginfo-8.0.102-2.el8_9.aa
redhat/dotnet-sdk-dbg<8.0-8.0.102-2.el8_9.aa
8.0-8.0.102-2.el8_9.aa
redhat/dotnet-targeting-pack<8.0-8.0.2-2.el8_9.aa
8.0-8.0.2-2.el8_9.aa
redhat/dotnet-templates<8.0-8.0.102-2.el8_9.aa
8.0-8.0.102-2.el8_9.aa
redhat/dotnet8.0-debuginfo<8.0.102-2.el8_9.aa
8.0.102-2.el8_9.aa
redhat/dotnet8.0-debugsource<8.0.102-2.el8_9.aa
8.0.102-2.el8_9.aa
redhat/netstandard-targeting-pack<2.1-8.0.102-2.el8_9.aa
2.1-8.0.102-2.el8_9.aa
redhat/dotnet-sdk<8.0-source-built-artifacts-8.0.102-2.el8_9
8.0-source-built-artifacts-8.0.102-2.el8_9
redhat/dotnet-sdk<8.0-source-built-artifacts-8.0.102-2.el8_9
8.0-source-built-artifacts-8.0.102-2.el8_9
redhat/dotnet-sdk<8.0-source-built-artifacts-8.0.102-2.el8_9.aa
8.0-source-built-artifacts-8.0.102-2.el8_9.aa
redhat/dotnet-sdk<8.0-source-built-artifacts-8.0.102-2.el8_9
8.0-source-built-artifacts-8.0.102-2.el8_9
Red Hat Red Hat CodeReady Linux Builder for ARM 64
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat CodeReady Linux Builder for x86_64
Red Hat Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems
Remediation
Event History
Feb 15, 2024
Advisory Published
via Red Hat·07:08 AM
Feb 23, 2024
Advisory Published
via Red Hat·07:44 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0827?
The severity of RHSA-2024:0827 is classified as important.
2
How do I fix RHSA-2024:0827?
To fix RHSA-2024:0827, update to the latest available versions of the affected .NET packages.
3
Which software is affected by RHSA-2024:0827?
RHSA-2024:0827 affects various Red Hat products including Red Hat Enterprise Linux and Red Hat CodeReady Linux Builder.
4
What versions of .NET address the vulnerability in RHSA-2024:0827?
The updated versions addressing the vulnerability are .NET SDK 8.0.102 and other related packages.
5
Is RHSA-2024:0827 related to any specific Red Hat platforms?
Yes, RHSA-2024:0827 affects multiple architectures including x86_64, ARM 64, Power, and IBM z Systems.