RHSA-2024:1555: Important: .NET 6.0 security update
Published Mar 27, 2024
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.Security Fix(es): dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
56 affected componentsFixes available
redhat/dotnet6.0<6.0.127-1.el9_2.1
6.0.127-1.el9_2.1
redhat/aspnetcore-runtime<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/aspnetcore-targeting-pack<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-apphost-pack<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.27-1.el9_2.1
6.0-debuginfo-6.0.27-1.el9_2.1
redhat/dotnet-hostfxr<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.27-1.el9_2.1
6.0-debuginfo-6.0.27-1.el9_2.1
redhat/dotnet-runtime<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-runtime<6.0-debuginfo-6.0.27-1.el9_2.1
6.0-debuginfo-6.0.27-1.el9_2.1
redhat/dotnet-sdk<6.0-6.0.127-1.el9_2.1
6.0-6.0.127-1.el9_2.1
redhat/dotnet-sdk<6.0-debuginfo-6.0.127-1.el9_2.1
6.0-debuginfo-6.0.127-1.el9_2.1
redhat/dotnet-targeting-pack<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-templates<6.0-6.0.127-1.el9_2.1
6.0-6.0.127-1.el9_2.1
redhat/dotnet6.0-debuginfo<6.0.127-1.el9_2.1
6.0.127-1.el9_2.1
redhat/dotnet6.0-debugsource<6.0.127-1.el9_2.1
6.0.127-1.el9_2.1
redhat/aspnetcore-runtime<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/aspnetcore-targeting-pack<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-apphost-pack<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.27-1.el9_2.1
6.0-debuginfo-6.0.27-1.el9_2.1
redhat/dotnet-hostfxr<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.27-1.el9_2.1
6.0-debuginfo-6.0.27-1.el9_2.1
redhat/dotnet-runtime<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-runtime<6.0-debuginfo-6.0.27-1.el9_2.1
6.0-debuginfo-6.0.27-1.el9_2.1
redhat/dotnet-sdk<6.0-6.0.127-1.el9_2.1
6.0-6.0.127-1.el9_2.1
redhat/dotnet-sdk<6.0-debuginfo-6.0.127-1.el9_2.1
6.0-debuginfo-6.0.127-1.el9_2.1
redhat/dotnet-targeting-pack<6.0-6.0.27-1.el9_2.1
6.0-6.0.27-1.el9_2.1
redhat/dotnet-templates<6.0-6.0.127-1.el9_2.1
6.0-6.0.127-1.el9_2.1
redhat/dotnet6.0-debuginfo<6.0.127-1.el9_2.1
6.0.127-1.el9_2.1
redhat/dotnet6.0-debugsource<6.0.127-1.el9_2.1
6.0.127-1.el9_2.1
redhat/aspnetcore-runtime<6.0-6.0.27-1.el9_2.1.aa
6.0-6.0.27-1.el9_2.1.aa
redhat/aspnetcore-targeting-pack<6.0-6.0.27-1.el9_2.1.aa
6.0-6.0.27-1.el9_2.1.aa
redhat/dotnet-apphost-pack<6.0-6.0.27-1.el9_2.1.aa
6.0-6.0.27-1.el9_2.1.aa
redhat/dotnet-apphost-pack<6.0-debuginfo-6.0.27-1.el9_2.1.aa
6.0-debuginfo-6.0.27-1.el9_2.1.aa
redhat/dotnet-hostfxr<6.0-6.0.27-1.el9_2.1.aa
6.0-6.0.27-1.el9_2.1.aa
redhat/dotnet-hostfxr<6.0-debuginfo-6.0.27-1.el9_2.1.aa
6.0-debuginfo-6.0.27-1.el9_2.1.aa
redhat/dotnet-runtime<6.0-6.0.27-1.el9_2.1.aa
6.0-6.0.27-1.el9_2.1.aa
redhat/dotnet-runtime<6.0-debuginfo-6.0.27-1.el9_2.1.aa
6.0-debuginfo-6.0.27-1.el9_2.1.aa
redhat/dotnet-sdk<6.0-6.0.127-1.el9_2.1.aa
6.0-6.0.127-1.el9_2.1.aa
redhat/dotnet-sdk<6.0-debuginfo-6.0.127-1.el9_2.1.aa
6.0-debuginfo-6.0.127-1.el9_2.1.aa
redhat/dotnet-targeting-pack<6.0-6.0.27-1.el9_2.1.aa
6.0-6.0.27-1.el9_2.1.aa
redhat/dotnet-templates<6.0-6.0.127-1.el9_2.1.aa
6.0-6.0.127-1.el9_2.1.aa
redhat/dotnet6.0-debuginfo<6.0.127-1.el9_2.1.aa
6.0.127-1.el9_2.1.aa
redhat/dotnet6.0-debugsource<6.0.127-1.el9_2.1.aa
6.0.127-1.el9_2.1.aa
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.127-1.el9_2.1
6.0-source-built-artifacts-6.0.127-1.el9_2.1
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.127-1.el9_2.1
6.0-source-built-artifacts-6.0.127-1.el9_2.1
redhat/dotnet-sdk<6.0-source-built-artifacts-6.0.127-1.el9_2.1.aa
6.0-source-built-artifacts-6.0.127-1.el9_2.1.aa
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Remediation
Event History
Mar 27, 2024
Advisory Published
via Red Hat·11:06 PM
Nov 8, 2025
Advisory Published
via Red Hat·09:01 AM
Data Sourced
via Red Hat·09:01 AM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2024:1555?
The severity of RHSA-2024:1555 is categorized as important.
2
How do I fix RHSA-2024:1555?
You can fix RHSA-2024:1555 by updating to the remedied versions of .NET SDK 6.0.127 and other related packages.
3
Which software is affected by RHSA-2024:1555?
RHSA-2024:1555 affects multiple Red Hat products including Red Hat Enterprise Linux Server and Red Hat CodeReady Linux Builder.
4
What are the specific packages that require updating for RHSA-2024:1555?
Packages to update for RHSA-2024:1555 include dotnet6.0, aspnetcore-runtime, dotnet-sdk, and others listed in Red Hat's advisory.
5
Is there a recommended version to upgrade for RHSA-2024:1555?
Yes, the recommended version to upgrade to for addressing RHSA-2024:1555 is 6.0.127-1.el9_2.1.