RHSA-2024:1554: Important: .NET 6.0 security update
Published Mar 27, 2024
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.Security Fix(es): dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
67 affected componentsFixes available
redhat/dotnet6.0<6.0.127-1.el8_6
6.0.127-1.el8_6
redhat/aspnetcore-runtime<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/aspnetcore-targeting-pack<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet<6.0.127-1.el8_6
6.0.127-1.el8_6
redhat/dotnet-apphost-pack<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.27-1.el8_6
6.0-debuginfo-6.0.27-1.el8_6
redhat/dotnet-host<6.0.27-1.el8_6
6.0.27-1.el8_6
redhat/dotnet-host-debuginfo<6.0.27-1.el8_6
6.0.27-1.el8_6
redhat/dotnet-hostfxr<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.27-1.el8_6
6.0-debuginfo-6.0.27-1.el8_6
redhat/dotnet-runtime<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-runtime<6.0-debuginfo-6.0.27-1.el8_6
6.0-debuginfo-6.0.27-1.el8_6
redhat/dotnet-sdk<6.0-6.0.127-1.el8_6
6.0-6.0.127-1.el8_6
redhat/dotnet-sdk<6.0-debuginfo-6.0.127-1.el8_6
6.0-debuginfo-6.0.127-1.el8_6
redhat/dotnet-targeting-pack<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-templates<6.0-6.0.127-1.el8_6
6.0-6.0.127-1.el8_6
redhat/dotnet6.0-debuginfo<6.0.127-1.el8_6
6.0.127-1.el8_6
redhat/dotnet6.0-debugsource<6.0.127-1.el8_6
6.0.127-1.el8_6
redhat/netstandard-targeting-pack<2.1-6.0.127-1.el8_6
2.1-6.0.127-1.el8_6
redhat/aspnetcore-runtime<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/aspnetcore-targeting-pack<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet<6.0.127-1.el8_6
6.0.127-1.el8_6
redhat/dotnet-apphost-pack<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.27-1.el8_6
6.0-debuginfo-6.0.27-1.el8_6
redhat/dotnet-host<6.0.27-1.el8_6
6.0.27-1.el8_6
redhat/dotnet-host-debuginfo<6.0.27-1.el8_6
6.0.27-1.el8_6
redhat/dotnet-hostfxr<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.27-1.el8_6
6.0-debuginfo-6.0.27-1.el8_6
redhat/dotnet-runtime<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-runtime<6.0-debuginfo-6.0.27-1.el8_6
6.0-debuginfo-6.0.27-1.el8_6
redhat/dotnet-sdk<6.0-6.0.127-1.el8_6
6.0-6.0.127-1.el8_6
redhat/dotnet-sdk<6.0-debuginfo-6.0.127-1.el8_6
6.0-debuginfo-6.0.127-1.el8_6
redhat/dotnet-targeting-pack<6.0-6.0.27-1.el8_6
6.0-6.0.27-1.el8_6
redhat/dotnet-templates<6.0-6.0.127-1.el8_6
6.0-6.0.127-1.el8_6
redhat/dotnet6.0-debuginfo<6.0.127-1.el8_6
6.0.127-1.el8_6
redhat/dotnet6.0-debugsource<6.0.127-1.el8_6
6.0.127-1.el8_6
redhat/netstandard-targeting-pack<2.1-6.0.127-1.el8_6
2.1-6.0.127-1.el8_6
redhat/aspnetcore-runtime<6.0-6.0.27-1.el8_6.aa
6.0-6.0.27-1.el8_6.aa
redhat/aspnetcore-targeting-pack<6.0-6.0.27-1.el8_6.aa
6.0-6.0.27-1.el8_6.aa
redhat/dotnet<6.0.127-1.el8_6.aa
6.0.127-1.el8_6.aa
redhat/dotnet-apphost-pack<6.0-6.0.27-1.el8_6.aa
6.0-6.0.27-1.el8_6.aa
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.27-1.el8_6.aa
6.0-debuginfo-6.0.27-1.el8_6.aa
redhat/dotnet-host<6.0.27-1.el8_6.aa
6.0.27-1.el8_6.aa
redhat/dotnet-host-debuginfo<6.0.27-1.el8_6.aa
6.0.27-1.el8_6.aa
redhat/dotnet-hostfxr<6.0-6.0.27-1.el8_6.aa
6.0-6.0.27-1.el8_6.aa
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.27-1.el8_6.aa
6.0-debuginfo-6.0.27-1.el8_6.aa
redhat/dotnet-runtime<6.0-6.0.27-1.el8_6.aa
6.0-6.0.27-1.el8_6.aa
redhat/dotnet-runtime<6.0-debuginfo-6.0.27-1.el8_6.aa
6.0-debuginfo-6.0.27-1.el8_6.aa
redhat/dotnet-sdk<6.0-6.0.127-1.el8_6.aa
6.0-6.0.127-1.el8_6.aa
redhat/dotnet-sdk<6.0-debuginfo-6.0.127-1.el8_6.aa
6.0-debuginfo-6.0.127-1.el8_6.aa
redhat/dotnet-targeting-pack<6.0-6.0.27-1.el8_6.aa
6.0-6.0.27-1.el8_6.aa
redhat/dotnet-templates<6.0-6.0.127-1.el8_6.aa
6.0-6.0.127-1.el8_6.aa
redhat/dotnet6.0-debuginfo<6.0.127-1.el8_6.aa
6.0.127-1.el8_6.aa
redhat/dotnet6.0-debugsource<6.0.127-1.el8_6.aa
6.0.127-1.el8_6.aa
redhat/netstandard-targeting-pack<2.1-6.0.127-1.el8_6.aa
2.1-6.0.127-1.el8_6.aa
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.127-1.el8_6
6.0-source-built-artifacts-6.0.127-1.el8_6
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.127-1.el8_6
6.0-source-built-artifacts-6.0.127-1.el8_6
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.127-1.el8_6.aa
6.0-source-built-artifacts-6.0.127-1.el8_6.aa
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Remediation
Event History
Mar 27, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·11:05 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1554?
The severity of RHSA-2024:1554 is classified as important.
2
How do I fix RHSA-2024:1554?
To fix RHSA-2024:1554, you should update to the latest versions of .NET SDK 6.0.127 and related packages.
3
What packages are affected by RHSA-2024:1554?
RHSA-2024:1554 affects multiple packages including dotnet6.0, aspnetcore-runtime, and dotnet-sdk.
4
What versions address the RHSA-2024:1554 vulnerability?
Versions that address RHSA-2024:1554 include .NET SDK 6.0.127 and specific updates for other related packages.
5
Where can I find more information about RHSA-2024:1554?
For more information about RHSA-2024:1554, refer to the official Red Hat advisory.