Red Hat Security Advisory

RHSA-2024:0255

.NET 6.0 security, bug fix, and enhancement update

Released 2024-01-15 · Red Hat rating Important · View on Red Hat →

Fixed in

.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.26-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.26-1.el7_9, rh-dotnet60-dotnet-6.0.126-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.26-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.26-1.el7_9, rh-dotnet60-dotnet-6.0.126-1.el7_9 +9
.NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet60-aspnetcore-runtime-6.0-6.0.26-1.el7_9, rh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.26-1.el7_9, rh-dotnet60-dotnet-6.0.126-1.el7_9 +9

TI-2024-00056 CVE-2024-0057 · GHSA-68w7-72jg-6qpp

MEDIUM 54

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02778 Published 2024-01-09 Fixed in 8.0.1, 7.0.15 +25 CWE-20

TI-2024-00055 CVE-2024-0056 · GHSA-98g6-xh36-x2p7

MEDIUM 42

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0118 Published 2024-01-09 Fixed in 16.0.1110.1, 6.0.26 +17 CWE-319

TI-2024-14080 CVE-2024-21319 · GHSA-59j7-ghrg-fj52

LOW 35

Microsoft Identity Denial of service vulnerability

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.02892 Published 2024-01-09 Fixed in 6.0.26, 17.2.23 +8 CWE-20