Oval Definition:oval:com.redhat.rhsa:def:20202471
Revision Date:2020-06-10Version:638
Title:RHSA-2020:2471: .NET Core on Red Hat Enterprise Linux 8 security update (Important)
Description:.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

A new version of .NET Core that addresses a security vulnerability is now available. The updated version is .NET Core Runtime 2.1.19 and SDK 2.1.515.

Security Fix(es):

  • dotnet: Denial of service via untrusted input (CVE-2020-1108)

    This is an additional update to comprehensively address CVE-2020-1108.

    Default inclusions for applications built with .NET Core have been updated to reference the newest versions and their security fixes.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2020-1108
    RHSA-2020:2471
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • dotnet-host-fxr-2.1 is earlier than 0:2.1.19-1.el8_2
  • AND dotnet-host-fxr-2.1 is signed with Red Hat redhatrelease2 key
  • dotnet-runtime-2.1 is earlier than 0:2.1.19-1.el8_2
  • AND dotnet-runtime-2.1 is signed with Red Hat redhatrelease2 key
  • dotnet-sdk-2.1 is earlier than 0:2.1.515-1.el8_2
  • AND dotnet-sdk-2.1 is signed with Red Hat redhatrelease2 key
  • dotnet-sdk-2.1.5xx is earlier than 0:2.1.515-1.el8_2
  • AND dotnet-sdk-2.1.5xx is signed with Red Hat redhatrelease2 key
  • BACK