RHSA-2024:1641: Important: .NET 7.0 security update
Published Apr 2, 2024
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.Security Fix(es): dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
88 affected componentsFixes available
redhat/dotnet7.0<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-host<7.0.16-1.el8_8
7.0.16-1.el8_8
redhat/dotnet-host-debuginfo<7.0.16-1.el8_8
7.0.16-1.el8_8
redhat/dotnet-hostfxr<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-runtime<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-sdk<7.0-7.0.116-1.el8_8
7.0-7.0.116-1.el8_8
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el8_8
7.0-debuginfo-7.0.116-1.el8_8
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-templates<7.0-7.0.116-1.el8_8
7.0-7.0.116-1.el8_8
redhat/dotnet7.0-debuginfo<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/dotnet7.0-debugsource<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el8_8
2.1-7.0.116-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-host<7.0.16-1.el8_8
7.0.16-1.el8_8
redhat/dotnet-host-debuginfo<7.0.16-1.el8_8
7.0.16-1.el8_8
redhat/dotnet-hostfxr<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-runtime<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-sdk<7.0-7.0.116-1.el8_8
7.0-7.0.116-1.el8_8
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el8_8
7.0-debuginfo-7.0.116-1.el8_8
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-templates<7.0-7.0.116-1.el8_8
7.0-7.0.116-1.el8_8
redhat/dotnet7.0-debuginfo<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/dotnet7.0-debugsource<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el8_8
2.1-7.0.116-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-host<7.0.16-1.el8_8
7.0.16-1.el8_8
redhat/dotnet-host-debuginfo<7.0.16-1.el8_8
7.0.16-1.el8_8
redhat/dotnet-hostfxr<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-runtime<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el8_8
7.0-debuginfo-7.0.16-1.el8_8
redhat/dotnet-sdk<7.0-7.0.116-1.el8_8
7.0-7.0.116-1.el8_8
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el8_8
7.0-debuginfo-7.0.116-1.el8_8
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el8_8
7.0-7.0.16-1.el8_8
redhat/dotnet-templates<7.0-7.0.116-1.el8_8
7.0-7.0.116-1.el8_8
redhat/dotnet7.0-debuginfo<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/dotnet7.0-debugsource<7.0.116-1.el8_8
7.0.116-1.el8_8
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el8_8
2.1-7.0.116-1.el8_8
redhat/aspnetcore-runtime<7.0-7.0.16-1.el8_8.aa
7.0-7.0.16-1.el8_8.aa
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el8_8.aa
7.0-7.0.16-1.el8_8.aa
redhat/dotnet<7.0.116-1.el8_8.aa
7.0.116-1.el8_8.aa
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el8_8.aa
7.0-7.0.16-1.el8_8.aa
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el8_8.aa
7.0-debuginfo-7.0.16-1.el8_8.aa
redhat/dotnet-host<7.0.16-1.el8_8.aa
7.0.16-1.el8_8.aa
redhat/dotnet-host-debuginfo<7.0.16-1.el8_8.aa
7.0.16-1.el8_8.aa
redhat/dotnet-hostfxr<7.0-7.0.16-1.el8_8.aa
7.0-7.0.16-1.el8_8.aa
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el8_8.aa
7.0-debuginfo-7.0.16-1.el8_8.aa
redhat/dotnet-runtime<7.0-7.0.16-1.el8_8.aa
7.0-7.0.16-1.el8_8.aa
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el8_8.aa
7.0-debuginfo-7.0.16-1.el8_8.aa
redhat/dotnet-sdk<7.0-7.0.116-1.el8_8.aa
7.0-7.0.116-1.el8_8.aa
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el8_8.aa
7.0-debuginfo-7.0.116-1.el8_8.aa
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el8_8.aa
7.0-7.0.16-1.el8_8.aa
redhat/dotnet-templates<7.0-7.0.116-1.el8_8.aa
7.0-7.0.116-1.el8_8.aa
redhat/dotnet7.0-debuginfo<7.0.116-1.el8_8.aa
7.0.116-1.el8_8.aa
redhat/dotnet7.0-debugsource<7.0.116-1.el8_8.aa
7.0.116-1.el8_8.aa
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el8_8.aa
2.1-7.0.116-1.el8_8.aa
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el8_8
7.0-source-built-artifacts-7.0.116-1.el8_8
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el8_8
7.0-source-built-artifacts-7.0.116-1.el8_8
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el8_8
7.0-source-built-artifacts-7.0.116-1.el8_8
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el8_8.aa
7.0-source-built-artifacts-7.0.116-1.el8_8.aa
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Remediation
Event History
Apr 2, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·08:01 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1641?
The severity of RHSA-2024:1641 is classified as important.
2
How do I fix RHSA-2024:1641?
To fix RHSA-2024:1641, update to the patched versions: .NET SDK 7.0.116 and related packages.
3
Which software is affected by RHSA-2024:1641?
RHSA-2024:1641 affects several versions of Red Hat Enterprise Linux and .NET related packages.
4
What vulnerabilities does RHSA-2024:1641 address?
RHSA-2024:1641 addresses a security vulnerability in the .NET framework.
5
When was RHSA-2024:1641 released?
RHSA-2024:1641 was released on a date that can be found in the associated advisory.