Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Microsoft .NET 7.0 Security Update for Linux

published 2 years ago

Summary

A security update for Microsoft .NET 7.0 on Linux systems is available to fix a potential security risk. This update is important for organizations using .NET 7.0 on Linux to prevent unauthorized access to their systems. We recommend applying the update as soon as possible to ensure the security of your systems.

What to do

Update redhat aspnetcore-runtime-7.0 to version 0:7.0.19-1.el9_4.
Update redhat aspnetcore-targeting-pack-7.0 to version 0:7.0.19-1.el9_4.
Update redhat dotnet-apphost-pack-7.0 to version 0:7.0.19-1.el9_4.
Update redhat dotnet-apphost-pack-7.0-debuginfo to version 0:7.0.19-1.el9_4.
Update redhat dotnet-hostfxr-7.0 to version 0:7.0.19-1.el9_4.
Update redhat dotnet-hostfxr-7.0-debuginfo to version 0:7.0.19-1.el9_4.
Update redhat dotnet-runtime-7.0 to version 0:7.0.19-1.el9_4.
Update redhat dotnet-runtime-7.0-debuginfo to version 0:7.0.19-1.el9_4.
Update redhat dotnet-sdk-7.0 to version 0:7.0.119-1.el9_4.
Update redhat dotnet-sdk-7.0-debuginfo to version 0:7.0.119-1.el9_4.
Update redhat dotnet-targeting-pack-7.0 to version 0:7.0.19-1.el9_4.
Update redhat dotnet-templates-7.0 to version 0:7.0.119-1.el9_4.
Update redhat dotnet7.0 to version 0:7.0.119-1.el9_4.
Update redhat dotnet7.0-debuginfo to version 0:7.0.119-1.el9_4.
Update redhat dotnet7.0-debugsource to version 0:7.0.119-1.el9_4.
Update redhat dotnet-sdk-7.0-source-built-artifacts to version 0:7.0.119-1.el9_4.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	aspnetcore-runtime-7.0	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	aspnetcore-targeting-pack-7.0	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-apphost-pack-7.0	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-apphost-pack-7.0-debuginfo	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-hostfxr-7.0	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-hostfxr-7.0-debuginfo	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-runtime-7.0	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-runtime-7.0-debuginfo	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-sdk-7.0	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-sdk-7.0-debuginfo	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-targeting-pack-7.0	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-templates-7.0	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet7.0	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet7.0-debuginfo	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::appstream	redhat	dotnet7.0-debugsource	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::crb	redhat	dotnet-apphost-pack-7.0-debuginfo	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::crb	redhat	dotnet-hostfxr-7.0-debuginfo	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::crb	redhat	dotnet-runtime-7.0-debuginfo	< 0:7.0.19-1.el9_4 Fix: upgrade to 0:7.0.19-1.el9_4
Red Hat:enterprise_linux:9::crb	redhat	dotnet-sdk-7.0-debuginfo	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::crb	redhat	dotnet-sdk-7.0-source-built-artifacts	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::crb	redhat	dotnet7.0-debuginfo	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4
Red Hat:enterprise_linux:9::crb	redhat	dotnet7.0-debugsource	< 0:7.0.119-1.el9_4 Fix: upgrade to 0:7.0.119-1.el9_4

Original advisory text

Red Hat Security Advisory: .NET 7.0 security update

References

https://access.redhat.com/errata/RHSA-2024:2843 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2279695 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2279697 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2843.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-21386 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2263085 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-21386 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-21386 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-21404 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2263086 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-21404 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-21404 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-30045 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-30045 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-30045 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-30046 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-30046 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-30046 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published16 Sep 2024

Updated14 Aug 2026

First seen14 Aug 2026

Sources

RHSA-2024:2843 · OSV

Track software like this

Free during beta