Red Hat Security Advisory

RHSA-2022:6037

.NET Core 3.1 security, bug fix, and enhancement update

Released 2022-08-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.28-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.28-1.el7_9, rh-dotnet31-dotnet-3.1.422-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.28-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.28-1.el7_9, rh-dotnet31-dotnet-3.1.422-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.28-1.el7_9, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.28-1.el7_9, rh-dotnet31-dotnet-3.1.422-1.el7_9 +9

TI-2022-01520 CVE-2022-1650 · GHSA-6h5x-7c5m-7cr7

MEDIUM 44

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.01861 Published 2022-05-12 Partial fix · v2.0.2, v1.1.1 +2 CWE-212

TI-2022-15528 CVE-2022-34716 · GHSA-vh55-786g-wjwj

LOW 31

.NET Spoofing Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02498 Published 2022-08-09 Fixed in 15.9.50, 17.2.7 +9 CWE-290