RHSA-2024:1643: Important: .NET 7.0 security update
Published Apr 2, 2024
·Updated
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.Security Fix(es): dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
86 affected componentsFixes available
redhat/dotnet7.0<7.0.116-1.el9_2
7.0.116-1.el9_2
redhat/aspnetcore-runtime<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-host<7.0.16-1.el9_2
7.0.16-1.el9_2
redhat/dotnet-host-debuginfo<7.0.16-1.el9_2
7.0.16-1.el9_2
redhat/dotnet-hostfxr<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-runtime<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-sdk<7.0-7.0.116-1.el9_2
7.0-7.0.116-1.el9_2
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el9_2
7.0-debuginfo-7.0.116-1.el9_2
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-templates<7.0-7.0.116-1.el9_2
7.0-7.0.116-1.el9_2
redhat/dotnet7.0-debuginfo<7.0.116-1.el9_2
7.0.116-1.el9_2
redhat/dotnet7.0-debugsource<7.0.116-1.el9_2
7.0.116-1.el9_2
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el9_2
2.1-7.0.116-1.el9_2
redhat/aspnetcore-runtime<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-host<7.0.16-1.el9_2
7.0.16-1.el9_2
redhat/dotnet-host-debuginfo<7.0.16-1.el9_2
7.0.16-1.el9_2
redhat/dotnet-hostfxr<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-runtime<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-sdk<7.0-7.0.116-1.el9_2
7.0-7.0.116-1.el9_2
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el9_2
7.0-debuginfo-7.0.116-1.el9_2
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-templates<7.0-7.0.116-1.el9_2
7.0-7.0.116-1.el9_2
redhat/dotnet7.0-debuginfo<7.0.116-1.el9_2
7.0.116-1.el9_2
redhat/dotnet7.0-debugsource<7.0.116-1.el9_2
7.0.116-1.el9_2
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el9_2
2.1-7.0.116-1.el9_2
redhat/aspnetcore-runtime<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-host<7.0.16-1.el9_2
7.0.16-1.el9_2
redhat/dotnet-host-debuginfo<7.0.16-1.el9_2
7.0.16-1.el9_2
redhat/dotnet-hostfxr<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-runtime<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el9_2
7.0-debuginfo-7.0.16-1.el9_2
redhat/dotnet-sdk<7.0-7.0.116-1.el9_2
7.0-7.0.116-1.el9_2
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el9_2
7.0-debuginfo-7.0.116-1.el9_2
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el9_2
7.0-7.0.16-1.el9_2
redhat/dotnet-templates<7.0-7.0.116-1.el9_2
7.0-7.0.116-1.el9_2
redhat/dotnet7.0-debuginfo<7.0.116-1.el9_2
7.0.116-1.el9_2
redhat/dotnet7.0-debugsource<7.0.116-1.el9_2
7.0.116-1.el9_2
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el9_2
2.1-7.0.116-1.el9_2
redhat/aspnetcore-runtime<7.0-7.0.16-1.el9_2.aa
7.0-7.0.16-1.el9_2.aa
redhat/aspnetcore-targeting-pack<7.0-7.0.16-1.el9_2.aa
7.0-7.0.16-1.el9_2.aa
redhat/dotnet-apphost-pack<7.0-7.0.16-1.el9_2.aa
7.0-7.0.16-1.el9_2.aa
redhat/dotnet-apphost-pack<7.0-debuginfo-7.0.16-1.el9_2.aa
7.0-debuginfo-7.0.16-1.el9_2.aa
redhat/dotnet-host<7.0.16-1.el9_2.aa
7.0.16-1.el9_2.aa
redhat/dotnet-host-debuginfo<7.0.16-1.el9_2.aa
7.0.16-1.el9_2.aa
redhat/dotnet-hostfxr<7.0-7.0.16-1.el9_2.aa
7.0-7.0.16-1.el9_2.aa
redhat/dotnet-hostfxr<7.0-debuginfo-7.0.16-1.el9_2.aa
7.0-debuginfo-7.0.16-1.el9_2.aa
redhat/dotnet-runtime<7.0-7.0.16-1.el9_2.aa
7.0-7.0.16-1.el9_2.aa
redhat/dotnet-runtime<7.0-debuginfo-7.0.16-1.el9_2.aa
7.0-debuginfo-7.0.16-1.el9_2.aa
redhat/dotnet-sdk<7.0-7.0.116-1.el9_2.aa
7.0-7.0.116-1.el9_2.aa
redhat/dotnet-sdk<7.0-debuginfo-7.0.116-1.el9_2.aa
7.0-debuginfo-7.0.116-1.el9_2.aa
redhat/dotnet-targeting-pack<7.0-7.0.16-1.el9_2.aa
7.0-7.0.16-1.el9_2.aa
redhat/dotnet-templates<7.0-7.0.116-1.el9_2.aa
7.0-7.0.116-1.el9_2.aa
redhat/dotnet7.0-debuginfo<7.0.116-1.el9_2.aa
7.0.116-1.el9_2.aa
redhat/dotnet7.0-debugsource<7.0.116-1.el9_2.aa
7.0.116-1.el9_2.aa
redhat/netstandard-targeting-pack<2.1-7.0.116-1.el9_2.aa
2.1-7.0.116-1.el9_2.aa
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el9_2
7.0-source-built-artifacts-7.0.116-1.el9_2
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el9_2
7.0-source-built-artifacts-7.0.116-1.el9_2
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el9_2
7.0-source-built-artifacts-7.0.116-1.el9_2
redhat/dotnet-sdk<7.0-source-built-artifacts-7.0.116-1.el9_2.aa
7.0-source-built-artifacts-7.0.116-1.el9_2.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Remediation
Event History
Apr 2, 2024
Advisory Published
via Red Hat·12:00 AM
Advisory Published
via Red Hat·08:03 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1643?
The severity of RHSA-2024:1643 is classified as important.
2
How do I fix RHSA-2024:1643?
To fix RHSA-2024:1643, you should update to the recommended version of .NET SDK 7.0.116 and other affected packages as specified.
3
Which packages are affected by RHSA-2024:1643?
RHSA-2024:1643 affects several packages including dotnet-sdk, dotnet-runtime, aspnetcore-runtime, and dotnet-host.
4
What versions address the RHSA-2024:1643 vulnerability?
The versions that address the vulnerability in RHSA-2024:1643 include dotnet-sdk 7.0.116 and relevant updates for associated packages.
5
Where can I find more details about RHSA-2024:1643?
You can find more details about RHSA-2024:1643 in the official Red Hat advisory.