Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-0057 (GCVE-0-2024-0057)
Vulnerability from cvelistv5 – Published: 2024-01-09 17:56 – Updated: 2025-06-03 14:30- CWE-20 - Improper Input Validation
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisory |
| https://security.netapp.com/advisory/ntap-2024020… | x_transferred |
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | .NET 8.0 |
Affected:
8.0 , < 8.0.1
(custom)
|
|
| Microsoft | .NET 7.0 |
Affected:
7.0.0 , < 7.0.15
(custom)
|
|
| Microsoft | .NET 6.0 |
Affected:
6.0.0 , < 6.0.26
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2022 version 17.2 |
Affected:
17.2.0 , < 17.2.23
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) |
Affected:
16.11.0 , < 16.11.34
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2022 version 17.4 |
Affected:
17.4.0 , < 17.4.15
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2022 version 17.6 |
Affected:
17.6.0 , < 17.6.11
(custom)
|
|
| Microsoft | Microsoft Visual Studio 2022 version 17.8 |
Affected:
17.8.0 , < 17.8.4
(custom)
|
|
| Microsoft | NuGet 5.11.0 |
Affected:
5.11.0 , < 5.11.6.0
(custom)
|
|
| Microsoft | NuGet 17.4.0 |
Affected:
17.4.0 , < 17.4.3.0
(custom)
|
|
| Microsoft | NUGET 17.6.0 |
Affected:
17.6.0 , < 17.6.2.0
(custom)
|
|
| Microsoft | NuGet 17.8.0 |
Affected:
17.8.0 , < 17.8.1.0
(custom)
|
|
| Microsoft | PowerShell 7.2 |
Affected:
7.2.0 , < 7.2.18
(custom)
|
|
| Microsoft | PowerShell 7.3 |
Affected:
7.3.0 , < 7.3.11
(custom)
|
|
| Microsoft | PowerShell 7.4 |
Affected:
7.4.0 , < 7.4.2
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.8 |
Affected:
4.8.0 , < 4.8.04690.02
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 |
Affected:
4.8.0 , < 4.8.04690.02
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 |
Affected:
4.7.0 , < 4.7.04081.03
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 |
Affected:
4.7.0 , < 4.7.04081.02
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 |
Affected:
4.8.1 , < 4.8.09214.01
(custom)
|
|
| Microsoft | Microsoft .NET Framework 2.0 Service Pack 2 |
Affected:
2.0.0 , < 3.0.50727.8976
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.0 Service Pack 2 |
Affected:
3.0.0 , < 3.0.50727.8976
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T17:41:15.867Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240208-0007/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-0057",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-08T18:42:11.295568Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-03T14:30:26.630Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"Unknown"
],
"product": ".NET 8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "8.0.1",
"status": "affected",
"version": "8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": ".NET 7.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "7.0.15",
"status": "affected",
"version": "7.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": ".NET 6.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "6.0.26",
"status": "affected",
"version": "6.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "Microsoft Visual Studio 2022 version 17.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.2.23",
"status": "affected",
"version": "17.2.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.11.34",
"status": "affected",
"version": "16.11.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "Microsoft Visual Studio 2022 version 17.4",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.4.15",
"status": "affected",
"version": "17.4.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "Microsoft Visual Studio 2022 version 17.6",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.6.11",
"status": "affected",
"version": "17.6.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "Microsoft Visual Studio 2022 version 17.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.8.4",
"status": "affected",
"version": "17.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "NuGet 5.11.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "5.11.6.0",
"status": "affected",
"version": "5.11.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "NuGet 17.4.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.4.3.0",
"status": "affected",
"version": "17.4.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "NUGET 17.6.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.6.2.0",
"status": "affected",
"version": "17.6.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "NuGet 17.8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.8.1.0",
"status": "affected",
"version": "17.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "PowerShell 7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "7.2.18",
"status": "affected",
"version": "7.2.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "PowerShell 7.3",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "7.3.11",
"status": "affected",
"version": "7.3.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Unknown"
],
"product": "PowerShell 7.4",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "7.4.2",
"status": "affected",
"version": "7.4.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016",
"Windows Server 2016 (Server Core installation)",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.04690.02",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 1809 for 32-bit Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.04690.02",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 1809 for ARM64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016 (Server Core installation)",
"Windows Server 2016"
],
"product": "Microsoft .NET Framework 3.5 AND 4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04081.03",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04081.02",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 11 Version 22H2 for ARM64-based Systems",
"Windows 11 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 11 Version 23H2 for ARM64-based Systems",
"Windows 11 Version 23H2 for x64-based Systems",
"Windows Server 2022, 23H2 Edition (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.09214.01",
"status": "affected",
"version": "4.8.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2"
],
"product": "Microsoft .NET Framework 2.0 Service Pack 2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "3.0.50727.8976",
"status": "affected",
"version": "2.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 for 32-bit Systems Service Pack 2",
"Windows Server 2008 for x64-based Systems Service Pack 2"
],
"product": "Microsoft .NET Framework 3.0 Service Pack 2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "3.0.50727.8976",
"status": "affected",
"version": "3.0.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.0.1",
"versionStartIncluding": "8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0.15",
"versionStartIncluding": "7.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.0.26",
"versionStartIncluding": "6.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.2.23",
"versionStartIncluding": "17.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.11.34",
"versionStartIncluding": "16.11.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.4.15",
"versionStartIncluding": "17.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.6.11",
"versionStartIncluding": "17.6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.8.4",
"versionStartIncluding": "17.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.11.6.0",
"versionStartIncluding": "5.11.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.4.3.0",
"versionStartIncluding": "17.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.6.2.0",
"versionStartIncluding": "17.6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.8.1.0",
"versionStartIncluding": "17.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.2.18",
"versionStartIncluding": "7.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
"versionEndExcluding": "7.3.11",
"versionStartIncluding": "7.3.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*",
"versionEndExcluding": "7.4.2",
"versionStartIncluding": "7.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.04690.02",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.04690.02",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.7.04081.03",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.7.04081.02",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.09214.01",
"versionStartIncluding": "4.8.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
"versionEndExcluding": "3.0.50727.8976",
"versionStartIncluding": "2.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:*",
"versionEndExcluding": "3.0.50727.8976",
"versionStartIncluding": "3.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2024-01-09T08:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability"
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-03T01:46:55.904Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability",
"tags": [
"vendor-advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057"
}
],
"title": "NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2024-0057",
"datePublished": "2024-01-09T17:56:59.552Z",
"dateReserved": "2023-11-22T17:43:37.319Z",
"dateUpdated": "2025-06-03T14:30:26.630Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-0057",
"date": "2026-06-07",
"epss": "0.03635",
"percentile": "0.88067"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-0057\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2024-01-09T18:15:46.980\",\"lastModified\":\"2024-11-21T08:45:49.400\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabididad en NET, .NET Framework y Visual Studio Security Feature Bypass\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2\",\"versionEndExcluding\":\"7.2.18\",\"matchCriteriaId\":\"79FFDD43-C822-4C24-BEBE-D5DBC069E1E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.3\",\"versionEndExcluding\":\"7.3.11\",\"matchCriteriaId\":\"2295A08D-C53B-40F8-961E-B115471735A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:powershell:7.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFAAFDC7-5AA2-43E6-BE0B-7E0C02FC39C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.2\",\"versionEndExcluding\":\"17.2.23\",\"matchCriteriaId\":\"05D999A1-AB25-4642-8D94-07AD00FEE820\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.4\",\"versionEndExcluding\":\"17.4.15\",\"matchCriteriaId\":\"AE1C61FB-CC6B-4D88-8B7F-FFE9D1238A6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.6\",\"versionEndExcluding\":\"17.6.11\",\"matchCriteriaId\":\"7CA9C0A3-7D62-40CE-8493-514CB313F72C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.8\",\"versionEndExcluding\":\"17.8.4\",\"matchCriteriaId\":\"DD49CC9F-3750-4EB3-A934-E45F0DE41238\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.8\",\"versionEndExcluding\":\"4.8.04690.02\",\"matchCriteriaId\":\"071AF08C-F921-45EC-A6AC-3BCE75D7FB22\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"5E491E46-1917-41FE-8F9A-BB0BDDEB42C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"0A1BC97A-263E-4291-8AEF-02EE4E6031E9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.8\",\"versionEndExcluding\":\"4.8.04690.01\",\"matchCriteriaId\":\"A4F2BA42-96F4-4DD6-ADFC-B5B8D45BCB78\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734112B3-1383-4BE3-8721-C0F84566B764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"934D4E46-12C1-41DC-A28C-A2C430E965E4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"306B7CE6-8239-4AED-9ED4-4C9F5B349F58\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"345FCD64-D37B-425B-B64C-8B1640B7E850\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"8FC46499-DB6E-48BF-9334-85EE27AFE7AF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"83A79DD6-E74E-419F-93F1-323B68502633\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"61959ACC-B608-4556-92AF-4D94B338907A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"A9D54EE6-30AF-411C-A285-A4DCB6C6EC06\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"C230D3BF-7FCE-405C-B62E-B9190C995C3C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"1FD62DCB-66D1-4CEA-828E-0BD302AC63CA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"0C3552E0-F793-4CDD-965D-457495475805\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"B2D24C54-F04F-4717-B614-FE67B3ED9DC0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"D5EC3F68-8F41-4F6B-B2E5-920322A4A321\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"B0301BA0-81DB-4FC1-9BC3-EB48A56BC608\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"8E3C1327-F331-4448-A253-00EAC7428317\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022_23h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75CCACE6-A0EE-4A6F-BD5A-7AA504B02717\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.8\",\"versionEndExcluding\":\"4.8.04690.02\",\"matchCriteriaId\":\"071AF08C-F921-45EC-A6AC-3BCE75D7FB22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"306B7CE6-8239-4AED-9ED4-4C9F5B349F58\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"345FCD64-D37B-425B-B64C-8B1640B7E850\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"8FC46499-DB6E-48BF-9334-85EE27AFE7AF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"83A79DD6-E74E-419F-93F1-323B68502633\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"61959ACC-B608-4556-92AF-4D94B338907A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"A9D54EE6-30AF-411C-A285-A4DCB6C6EC06\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"C230D3BF-7FCE-405C-B62E-B9190C995C3C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"1FD62DCB-66D1-4CEA-828E-0BD302AC63CA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"F2D718BD-C4B7-48DB-BE78-B9CA22F27DD0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"0C3552E0-F793-4CDD-965D-457495475805\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"B2D24C54-F04F-4717-B614-FE67B3ED9DC0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"D5EC3F68-8F41-4F6B-B2E5-920322A4A321\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022_23h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75CCACE6-A0EE-4A6F-BD5A-7AA504B02717\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E039CE1F-B988-4741-AE2E-5B36E2AF9688\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"5E491E46-1917-41FE-8F9A-BB0BDDEB42C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"0A1BC97A-263E-4291-8AEF-02EE4E6031E9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*\",\"matchCriteriaId\":\"73D24713-D897-408D-893B-77A61982597D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*\",\"matchCriteriaId\":\"306B7CE6-8239-4AED-9ED4-4C9F5B349F58\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*\",\"matchCriteriaId\":\"345FCD64-D37B-425B-B64C-8B1640B7E850\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"42A6DF09-B8E1-414D-97E7-453566055279\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D400E856-2B2E-4CEA-8CA5-309FDF371CEA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*\",\"matchCriteriaId\":\"2127D10C-B6F3-4C1D-B9AA-5D78513CC996\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*\",\"matchCriteriaId\":\"AB425562-C0A0-452E-AABE-F70522F15E1A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.0.26\",\"matchCriteriaId\":\"498DF6C9-EC7C-4A4F-A188-B22E82FD6540\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.15\",\"matchCriteriaId\":\"3CE00AC7-D405-4567-8CB1-C3ED7E2925C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:8.0.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BD92442-4815-4085-B66F-9A610097A41B\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240208-0007/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
RHSA-2024:0156
Vulnerability from csaf_redhat - Published: 2024-01-10 18:19 - Updated: 2026-03-18 02:31A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app's typical authentication logic.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:0156",
"url": "https://access.redhat.com/errata/RHSA-2024:0156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0156.json"
}
],
"title": "Red Hat Security Advisory: .NET 6.0 security update",
"tracking": {
"current_release_date": "2026-03-18T02:31:12+00:00",
"generator": {
"date": "2026-03-18T02:31:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.3"
}
},
"id": "RHSA-2024:0156",
"initial_release_date": "2024-01-10T18:19:10+00:00",
"revision_history": [
{
"date": "2024-01-10T18:19:10+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-01-10T18:19:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-18T02:31:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder (v. 9)",
"product": {
"name": "Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"product_id": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"product": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"product_id": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"product": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"product_id": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"product": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"product_id": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"product": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"product": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"product": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el9_3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"product_id": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"product": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"product_id": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"product": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"product_id": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"product": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"product_id": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"product": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"product": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"product": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el9_3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"product_id": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"product": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"product_id": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"product": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"product_id": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"product": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"product_id": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"product": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"product": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"product": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el9_3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet6.0-0:6.0.126-1.el9_3.src",
"product": {
"name": "dotnet6.0-0:6.0.126-1.el9_3.src",
"product_id": "dotnet6.0-0:6.0.126-1.el9_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0@6.0.126-1.el9_3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-0:6.0.126-1.el9_3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src"
},
"product_reference": "dotnet6.0-0:6.0.126-1.el9_3.src",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "AppStream-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-0:6.0.126-1.el9_3.src as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src"
},
"product_reference": "dotnet6.0-0:6.0.126-1.el9_3.src",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"relates_to_product_reference": "CRB-9.3.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-46233",
"cwe": {
"id": "CWE-916",
"name": "Use of Password Hash With Insufficient Computational Effort"
},
"discovery_date": "2023-10-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2246369"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46233"
},
{
"category": "external",
"summary": "RHBZ#2246369",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233"
},
{
"category": "external",
"summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf",
"url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf"
}
],
"release_date": "2023-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:19:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard"
},
{
"cve": "CVE-2024-0056",
"cwe": {
"id": "CWE-420",
"name": "Unprotected Alternate Channel"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255384"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0056"
},
{
"category": "external",
"summary": "RHBZ#2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0056"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:19:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)"
},
{
"cve": "CVE-2024-0057",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255386"
}
],
"notes": [
{
"category": "description",
"text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: X509 Certificates - Validation Bypass across Azure",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0057"
},
{
"category": "external",
"summary": "RHBZ#2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0057"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:19:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: X509 Certificates - Validation Bypass across Azure"
},
{
"cve": "CVE-2024-21319",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-01-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2257566"
}
],
"notes": [
{
"category": "description",
"text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-21319"
},
{
"category": "external",
"summary": "RHBZ#2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21319"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:19:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x",
"CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET Denial of Service Vulnerability"
}
]
}
RHSA-2024:0157
Vulnerability from csaf_redhat - Published: 2024-01-10 18:38 - Updated: 2026-03-18 02:31A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app's typical authentication logic.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 7.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:0157",
"url": "https://access.redhat.com/errata/RHSA-2024:0157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0157.json"
}
],
"title": "Red Hat Security Advisory: .NET 7.0 security update",
"tracking": {
"current_release_date": "2026-03-18T02:31:13+00:00",
"generator": {
"date": "2026-03-18T02:31:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.3"
}
},
"id": "RHSA-2024:0157",
"initial_release_date": "2024-01-10T18:38:11+00:00",
"revision_history": [
{
"date": "2024-01-10T18:38:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-01-10T18:38:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-18T02:31:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder (v. 8)",
"product": {
"name": "Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"product": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"product": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"product": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"product": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"product": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"product": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"product": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"product": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"product": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"product": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"product": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"product": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"product": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"product": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"product": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"product": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"product": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"product": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"product": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"product": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"product": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"product": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"product": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"product": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet7.0-0:7.0.115-1.el8_9.src",
"product": {
"name": "dotnet7.0-0:7.0.115-1.el8_9.src",
"product_id": "dotnet7.0-0:7.0.115-1.el8_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet7.0@7.0.115-1.el8_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-0:7.0.115-1.el8_9.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src"
},
"product_reference": "dotnet7.0-0:7.0.115-1.el8_9.src",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64"
},
"product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-0:7.0.115-1.el8_9.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src"
},
"product_reference": "dotnet7.0-0:7.0.115-1.el8_9.src",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
},
"product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-46233",
"cwe": {
"id": "CWE-916",
"name": "Use of Password Hash With Insufficient Computational Effort"
},
"discovery_date": "2023-10-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2246369"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46233"
},
{
"category": "external",
"summary": "RHBZ#2246369",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233"
},
{
"category": "external",
"summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf",
"url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf"
}
],
"release_date": "2023-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0157"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard"
},
{
"cve": "CVE-2024-0056",
"cwe": {
"id": "CWE-420",
"name": "Unprotected Alternate Channel"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255384"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0056"
},
{
"category": "external",
"summary": "RHBZ#2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0056"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0157"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)"
},
{
"cve": "CVE-2024-0057",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255386"
}
],
"notes": [
{
"category": "description",
"text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: X509 Certificates - Validation Bypass across Azure",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0057"
},
{
"category": "external",
"summary": "RHBZ#2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0057"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0157"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: X509 Certificates - Validation Bypass across Azure"
},
{
"cve": "CVE-2024-21319",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-01-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2257566"
}
],
"notes": [
{
"category": "description",
"text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-21319"
},
{
"category": "external",
"summary": "RHBZ#2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21319"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0157"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET Denial of Service Vulnerability"
}
]
}
RHSA-2024:0158
Vulnerability from csaf_redhat - Published: 2024-01-10 18:38 - Updated: 2026-03-18 02:31A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app's typical authentication logic.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:0158",
"url": "https://access.redhat.com/errata/RHSA-2024:0158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0158.json"
}
],
"title": "Red Hat Security Advisory: .NET 6.0 security update",
"tracking": {
"current_release_date": "2026-03-18T02:31:14+00:00",
"generator": {
"date": "2026-03-18T02:31:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.3"
}
},
"id": "RHSA-2024:0158",
"initial_release_date": "2024-01-10T18:38:00+00:00",
"revision_history": [
{
"date": "2024-01-10T18:38:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-01-10T18:38:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-18T02:31:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder (v. 8)",
"product": {
"name": "Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"product_id": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"product": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"product_id": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"product": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"product_id": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"product": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"product_id": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"product": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"product": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"product": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el8_9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"product_id": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"product": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"product_id": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"product": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"product_id": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"product": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"product_id": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"product": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"product": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"product": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el8_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"product_id": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"product": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"product_id": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"product": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"product_id": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"product": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"product_id": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"product": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"product": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"product": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el8_9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet6.0-0:6.0.126-1.el8_9.src",
"product": {
"name": "dotnet6.0-0:6.0.126-1.el8_9.src",
"product_id": "dotnet6.0-0:6.0.126-1.el8_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet6.0@6.0.126-1.el8_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-0:6.0.126-1.el8_9.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src"
},
"product_reference": "dotnet6.0-0:6.0.126-1.el8_9.src",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "AppStream-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64"
},
"product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-0:6.0.126-1.el8_9.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src"
},
"product_reference": "dotnet6.0-0:6.0.126-1.el8_9.src",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
},
"product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"relates_to_product_reference": "CRB-8.9.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-46233",
"cwe": {
"id": "CWE-916",
"name": "Use of Password Hash With Insufficient Computational Effort"
},
"discovery_date": "2023-10-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2246369"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46233"
},
{
"category": "external",
"summary": "RHBZ#2246369",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233"
},
{
"category": "external",
"summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf",
"url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf"
}
],
"release_date": "2023-10-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:00+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard"
},
{
"cve": "CVE-2024-0056",
"cwe": {
"id": "CWE-420",
"name": "Unprotected Alternate Channel"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255384"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0056"
},
{
"category": "external",
"summary": "RHBZ#2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0056"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:00+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)"
},
{
"cve": "CVE-2024-0057",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255386"
}
],
"notes": [
{
"category": "description",
"text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: X509 Certificates - Validation Bypass across Azure",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0057"
},
{
"category": "external",
"summary": "RHBZ#2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0057"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:00+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: X509 Certificates - Validation Bypass across Azure"
},
{
"cve": "CVE-2024-21319",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-01-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2257566"
}
],
"notes": [
{
"category": "description",
"text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-21319"
},
{
"category": "external",
"summary": "RHBZ#2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21319"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-10T18:38:00+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x",
"CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET Denial of Service Vulnerability"
}
]
}
RHSA-2024:0255
Vulnerability from csaf_redhat - Published: 2024-01-15 16:01 - Updated: 2025-11-21 18:53A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app's typical authentication logic.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.\n\nThe following packages have been upgraded to a later upstream version: rh-dotnet60-dotnet (6.0.126). (BZ#2255300)\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:0255",
"url": "https://access.redhat.com/errata/RHSA-2024:0255"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0255.json"
}
],
"title": "Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-11-21T18:53:00+00:00",
"generator": {
"date": "2025-11-21T18:53:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:0255",
"initial_release_date": "2024-01-15T16:01:35+00:00",
"revision_history": [
{
"date": "2024-01-15T16:01:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-01-15T16:01:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:53:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
}
}
},
{
"category": "product_name",
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
}
}
}
],
"category": "product_family",
"name": ".NET Core on Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"product_id": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-runtime-6.0@6.0.26-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product_id": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-targeting-pack-6.0@6.0.26-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.126-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-apphost-pack-6.0@6.0.26-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-host@6.0.26-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-hostfxr-6.0@6.0.26-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-runtime-6.0@6.0.26-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0@6.0.126-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-targeting-pack-6.0@6.0.26-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-templates-6.0@6.0.126-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"product_id": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-netstandard-targeting-pack-2.1@6.0.126-1.el7_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"product": {
"name": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"product_id": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-debuginfo@6.0.126-1.el7_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"product": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"product_id": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.126-1.el7_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src"
},
"product_reference": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7ComputeNode-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src"
},
"product_reference": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Server-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src"
},
"product_reference": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
},
"product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"relates_to_product_reference": "7Workstation-dotNET-6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-0056",
"cwe": {
"id": "CWE-420",
"name": "Unprotected Alternate Channel"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255384"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0056"
},
{
"category": "external",
"summary": "RHBZ#2255384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0056"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-15T16:01:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)"
},
{
"cve": "CVE-2024-0057",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2023-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255386"
}
],
"notes": [
{
"category": "description",
"text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: X509 Certificates - Validation Bypass across Azure",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0057"
},
{
"category": "external",
"summary": "RHBZ#2255386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0057"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-15T16:01:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: X509 Certificates - Validation Bypass across Azure"
},
{
"cve": "CVE-2024-21319",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-01-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2257566"
}
],
"notes": [
{
"category": "description",
"text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-21319"
},
{
"category": "external",
"summary": "RHBZ#2257566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21319"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319"
},
{
"category": "external",
"summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md",
"url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md"
}
],
"release_date": "2024-01-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-15T16:01:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0255"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.src",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.26-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.126-1.el7_9.x86_64",
"7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.126-1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET Denial of Service Vulnerability"
}
]
}
WID-SEC-W-2024-0039
Vulnerability from csaf_certbund - Published: 2024-01-09 23:00 - Updated: 2024-02-25 23:00Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Microsoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausf\u00fchrung von Softwareanwendungen und Webdiensten erm\u00f6glicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. f\u00fcr die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.\r\nMicrosoft Visual Studio ist eine integrierte Entwicklungsumgebung f\u00fcr Hochsprachen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Developer Tools ausnutzen, um seine Privilegien zu erh\u00f6hen, einen Denial of Service Zustand hervorzurufen oder Sicherheitsma\u00dfnahmen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0039 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0039.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0039 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0039"
},
{
"category": "external",
"summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-01-09",
"url": "https://msrc.microsoft.com/update-guide"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0158 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0158"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0150 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0150"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0157 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0157"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0151 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0151"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0152 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0152"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0156 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0156"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6578-1 vom 2024-01-11",
"url": "https://ubuntu.com/security/notices/USN-6578-1"
},
{
"category": "external",
"summary": "MDSec Research vom 2024-01-11",
"url": "https://www.mdsec.co.uk/2024/01/cve-2024-20656-local-privilege-escalation-in-vsstandardcollectorservice150-service/"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0156 vom 2024-01-13",
"url": "http://linux.oracle.com/errata/ELSA-2024-0156.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0255 vom 2024-01-16",
"url": "https://access.redhat.com/errata/RHSA-2024:0255"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0151 vom 2024-01-17",
"url": "https://linux.oracle.com/errata/ELSA-2024-0151.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0152 vom 2024-01-17",
"url": "https://linux.oracle.com/errata/ELSA-2024-0152.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0157 vom 2024-01-18",
"url": "https://linux.oracle.com/errata/ELSA-2024-0157.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0158 vom 2024-01-19",
"url": "http://linux.oracle.com/errata/ELSA-2024-0158.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0150 vom 2024-02-21",
"url": "https://linux.oracle.com/errata/ELSA-2024-0150.html"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2024-301 vom 2024-02-26",
"url": "https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/01.html"
}
],
"source_lang": "en-US",
"title": "Microsoft Developer Tools: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-02-25T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:03:25.029+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2024-0039",
"initial_release_date": "2024-01-09T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-01-09T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-01-10T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-01-11T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-01-14T23:00:00.000+00:00",
"number": "4",
"summary": "PoC aufgenommen"
},
{
"date": "2024-01-15T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-01-17T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-01-18T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-02-20T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-02-25T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von HITACHI aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Storage",
"product": {
"name": "Hitachi Storage",
"product_id": "T009295",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:storage:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "4.8.1",
"product": {
"name": "Microsoft .NET Framework 4.8.1",
"product_id": "1273212",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.8.1"
}
}
},
{
"category": "product_version",
"name": "4.7",
"product": {
"name": "Microsoft .NET Framework 4.7",
"product_id": "432554",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.7"
}
}
},
{
"category": "product_version",
"name": "4.7.1",
"product": {
"name": "Microsoft .NET Framework 4.7.1",
"product_id": "432555",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.7.1"
}
}
},
{
"category": "product_version",
"name": "4.7.2",
"product": {
"name": "Microsoft .NET Framework 4.7.2",
"product_id": "432556",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.7.2"
}
}
},
{
"category": "product_version",
"name": "4.8",
"product": {
"name": "Microsoft .NET Framework 4.8",
"product_id": "432557",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.8"
}
}
},
{
"category": "product_version",
"name": "3.5",
"product": {
"name": "Microsoft .NET Framework 3.5",
"product_id": "834793",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:3.5:-"
}
}
},
{
"category": "product_version",
"name": "2.0 SP2",
"product": {
"name": "Microsoft .NET Framework 2.0 SP2",
"product_id": "T021515",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:2.0_sp2"
}
}
},
{
"category": "product_version",
"name": "6",
"product": {
"name": "Microsoft .NET Framework 6.0",
"product_id": "T021995",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:6.0"
}
}
},
{
"category": "product_version",
"name": "3.0 SP2",
"product": {
"name": "Microsoft .NET Framework 3.0 SP2",
"product_id": "T024564",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:3.0_sp2"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Microsoft .NET Framework 7.0",
"product_id": "T029132",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:7.0"
}
}
},
{
"category": "product_version",
"name": "4.6.2",
"product": {
"name": "Microsoft .NET Framework 4.6.2",
"product_id": "T031928",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.6.2"
}
}
},
{
"category": "product_version",
"name": "8",
"product": {
"name": "Microsoft .NET Framework 8.0",
"product_id": "T031969",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:8.0"
}
}
}
],
"category": "product_name",
"name": ".NET Framework"
},
{
"branches": [
{
"category": "product_version",
"name": "Update 3",
"product": {
"name": "Microsoft Visual Studio 2015 Update 3",
"product_id": "T014511",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:visual_studio_2015:update_3"
}
}
}
],
"category": "product_name",
"name": "Visual Studio 2015"
},
{
"branches": [
{
"category": "product_version_range",
"name": "version 15.9 (includes 15.0 - 15.8)",
"product": {
"name": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
"product_id": "T015502"
}
}
],
"category": "product_name",
"name": "Visual Studio 2017"
},
{
"branches": [
{
"category": "product_version_range",
"name": "version 16.11 (includes 16.0 - 16.10)",
"product": {
"name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
"product_id": "T020376"
}
}
],
"category": "product_name",
"name": "Visual Studio 2019"
},
{
"branches": [
{
"category": "product_version_range",
"name": "version 17.2",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.2",
"product_id": "T028102"
}
},
{
"category": "product_version_range",
"name": "version 17.4",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.4",
"product_id": "T028103"
}
},
{
"category": "product_version_range",
"name": "version 17.6",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.6",
"product_id": "T028105"
}
},
{
"category": "product_version_range",
"name": "version 17.8",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.8",
"product_id": "T029805"
}
}
],
"category": "product_name",
"name": "Visual Studio 2022"
}
],
"category": "vendor",
"name": "Microsoft"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-21319",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-21319"
},
{
"cve": "CVE-2024-21312",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-21312"
},
{
"cve": "CVE-2024-20672",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-20672"
},
{
"cve": "CVE-2024-20656",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-20656"
},
{
"cve": "CVE-2024-0057",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-0057"
},
{
"cve": "CVE-2024-0056",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-0056"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.