Action not permitted
Modal body text goes here.
cve-2023-46233
Vulnerability from cvelistv5
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T20:37:40.123Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" }, { "name": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a", "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a" }, { "tags": [ "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "crypto-js", "vendor": "brix", "versions": [ { "status": "affected", "version": "\u003c 4.2.0" } ] } ], "descriptions": [ { "lang": "en", "value": "crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks. If used to protect passwords, the impact is high. If used to generate signatures, the impact is high. Version 4.2.0 contains a patch for this issue. As a workaround, configure crypto-js to use SHA256 with at least 250,000 iterations." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-328", "description": "CWE-328: Use of Weak Hash", "lang": "en", "type": "CWE" } ] }, { "descriptions": [ { "cweId": "CWE-916", "description": "CWE-916: Use of Password Hash With Insufficient Computational Effort", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2023-10-25T20:49:31.582Z", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M" }, "references": [ { "name": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" }, { "name": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a" }, { "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html" } ], "source": { "advisory": "GHSA-xwcq-pm8m-c4vf", "discovery": "UNKNOWN" }, "title": "crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" } }, "cveMetadata": { "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2023-46233", "datePublished": "2023-10-25T20:49:31.582Z", "dateReserved": "2023-10-19T20:34:00.946Z", "dateUpdated": "2024-08-02T20:37:40.123Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-46233\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2023-10-25T21:15:10.307\",\"lastModified\":\"2023-11-27T20:15:06.880\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks. If used to protect passwords, the impact is high. If used to generate signatures, the impact is high. Version 4.2.0 contains a patch for this issue. As a workaround, configure crypto-js to use SHA256 with at least 250,000 iterations.\"},{\"lang\":\"es\",\"value\":\"crypto-js es una librer\u00eda JavaScript de est\u00e1ndares criptogr\u00e1ficos. Antes de la versi\u00f3n 4.2.0, crypto-js PBKDF2 era 1000 veces m\u00e1s d\u00e9bil de lo especificado originalmente en 1993 y al menos 1.300.000 veces m\u00e1s d\u00e9bil que el est\u00e1ndar actual de la industria. Esto se debe a que su valor predeterminado es SHA1, un algoritmo hash criptogr\u00e1fico considerado inseguro desde al menos 2005, y su valor predeterminado es una \u00fanica iteraci\u00f3n, un valor de \\\"fuerza\\\" o \\\"dificultad\\\" especificado en 1000 cuando se especific\u00f3 en 1993. PBKDF2 se basa en el recuento de iteraciones como una contramedida a los ataques de preimagen y colisi\u00f3n. Si se utiliza para proteger contrase\u00f1as, el impacto es alto. Si se utiliza para generar firmas, el impacto es alto. La versi\u00f3n 4.2.0 contiene un parche para este problema. Como workaround, configure crypto-js para usar SHA256 con al menos 250 000 iteraciones.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2},{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-327\"}]},{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-328\"},{\"lang\":\"en\",\"value\":\"CWE-916\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:crypto-js_project:crypto-js:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.2.0\",\"matchCriteriaId\":\"B50D5D27-E8C7-40A3-9B23-C320A41DBB25\"}]}]}],\"references\":[{\"url\":\"https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html\",\"source\":\"security-advisories@github.com\"}]}}" } }
rhsa-2024_0805
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for dotnet7.0 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.\n\nSecurity Fix(es):\n\n* dotnet: Denial of Service in SignalR server (CVE-2024-21386)\n\n* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0805", "url": "https://access.redhat.com/errata/RHSA-2024:0805" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2263085", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263085" }, { "category": "external", "summary": "2263086", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263086" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0805.json" } ], "title": "Red Hat Security Advisory: dotnet7.0 security update", "tracking": { "current_release_date": "2024-11-06T05:00:46+00:00", "generator": { "date": "2024-11-06T05:00:46+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2024:0805", "initial_release_date": "2024-02-13T18:44:34+00:00", "revision_history": [ { "date": "2024-02-13T18:44:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-02-13T18:44:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T05:00:46+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat CodeReady Linux Builder (v. 9)", "product": { "name": "Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el9_3?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el9_3?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el9_3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el9_3?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dotnet7.0-0:7.0.116-1.el9_3.src", "product": { "name": "dotnet7.0-0:7.0.116-1.el9_3.src", "product_id": "dotnet7.0-0:7.0.116-1.el9_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0@7.0.116-1.el9_3?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.116-1.el9_3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src" }, "product_reference": "dotnet7.0-0:7.0.116-1.el9_3.src", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.116-1.el9_3.src as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src" }, "product_reference": "dotnet7.0-0:7.0.116-1.el9_3.src", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-46233", "cwe": { "id": "CWE-916", "name": "Use of Password Hash With Insufficient Computational Effort" }, "discovery_date": "2023-10-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246369" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard", "title": "Vulnerability summary" }, { "category": "other", "text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46233" }, { "category": "external", "summary": "RHBZ#2246369", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46233" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233" }, { "category": "external", "summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-02-13T18:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0805" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" }, { "cve": "CVE-2024-21386", "discovery_date": "2024-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2263085" } ], "notes": [ { "category": "description", "text": "A denial of service vulnerability is present in the .NET applications utilizing SignalR, which a malicious client can exploit. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service (DoS) attack by providing specially crafted input.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Denial of Service in SignalR server", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21386" }, { "category": "external", "summary": "RHBZ#2263085", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263085" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21386", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21386" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21386", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21386" } ], "release_date": "2024-02-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-02-13T18:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0805" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Denial of Service in SignalR server" }, { "cve": "CVE-2024-21404", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2263086" } ], "notes": [ { "category": "description", "text": "A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service (DoS) attack by providing specially crafted input.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Denial of Service in X509Certificate2", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21404" }, { "category": "external", "summary": "RHBZ#2263086", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263086" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21404", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21404" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21404", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21404" } ], "release_date": "2024-02-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-02-13T18:44:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0805" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Denial of Service in X509Certificate2" } ] }
rhsa-2024_0156
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0156", "url": "https://access.redhat.com/errata/RHSA-2024:0156" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0156.json" } ], "title": "Red Hat Security Advisory: .NET 6.0 security update", "tracking": { "current_release_date": "2024-11-06T04:40:54+00:00", "generator": { "date": "2024-11-06T04:40:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2024:0156", "initial_release_date": "2024-01-10T18:19:10+00:00", "revision_history": [ { "date": "2024-01-10T18:19:10+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-01-10T18:19:10+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T04:40:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat CodeReady Linux Builder (v. 9)", "product": { "name": "Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "product": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "product": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "product": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "product_id": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "product_id": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "product": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "product_id": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "product": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "product_id": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "product": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el9_3?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "product": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "product": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "product": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "product_id": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "product_id": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "product": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "product_id": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "product": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "product_id": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "product": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el9_3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "product": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "product": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "product": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "product": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "product": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "product_id": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "product": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "product_id": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "product": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "product": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "product_id": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "product": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "product_id": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "product": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "product": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "product": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el9_3?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dotnet6.0-0:6.0.126-1.el9_3.src", "product": { "name": "dotnet6.0-0:6.0.126-1.el9_3.src", "product_id": "dotnet6.0-0:6.0.126-1.el9_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0@6.0.126-1.el9_3?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-0:6.0.126-1.el9_3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src" }, "product_reference": "dotnet6.0-0:6.0.126-1.el9_3.src", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-0:6.0.126-1.el9_3.src as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src" }, "product_reference": "dotnet6.0-0:6.0.126-1.el9_3.src", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-46233", "cwe": { "id": "CWE-916", "name": "Use of Password Hash With Insufficient Computational Effort" }, "discovery_date": "2023-10-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246369" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard", "title": "Vulnerability summary" }, { "category": "other", "text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46233" }, { "category": "external", "summary": "RHBZ#2246369", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46233" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233" }, { "category": "external", "summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:19:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0156" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" }, { "cve": "CVE-2024-0056", "cwe": { "id": "CWE-420", "name": "Unprotected Alternate Channel" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255384" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0056" }, { "category": "external", "summary": "RHBZ#2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0056" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:19:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0156" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)" }, { "cve": "CVE-2024-0057", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255386" } ], "notes": [ { "category": "description", "text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: X509 Certificates - Validation Bypass across Azure", "title": "Vulnerability summary" }, { "category": "other", "text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0057" }, { "category": "external", "summary": "RHBZ#2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0057" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:19:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0156" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: X509 Certificates - Validation Bypass across Azure" }, { "cve": "CVE-2024-21319", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-01-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2257566" } ], "notes": [ { "category": "description", "text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: .NET Denial of Service Vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21319" }, { "category": "external", "summary": "RHBZ#2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21319" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:19:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0156" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "dotnet: .NET Denial of Service Vulnerability" } ] }
rhsa-2024_0151
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for .NET 7.0 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0151", "url": "https://access.redhat.com/errata/RHSA-2024:0151" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0151.json" } ], "title": "Red Hat Security Advisory: .NET 7.0 security update", "tracking": { "current_release_date": "2024-11-06T04:40:55+00:00", "generator": { "date": "2024-11-06T04:40:55+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2024:0151", "initial_release_date": "2024-01-10T15:42:10+00:00", "revision_history": [ { "date": "2024-01-10T15:42:10+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-01-10T15:42:10+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T04:40:55+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat CodeReady Linux Builder (v. 9)", "product": { "name": "Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el9_3?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el9_3?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el9_3?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el9_3?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el9_3?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el9_3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el9_3?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el9_3?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dotnet7.0-0:7.0.115-1.el9_3.src", "product": { "name": "dotnet7.0-0:7.0.115-1.el9_3.src", "product_id": "dotnet7.0-0:7.0.115-1.el9_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0@7.0.115-1.el9_3?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.115-1.el9_3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src" }, "product_reference": "dotnet7.0-0:7.0.115-1.el9_3.src", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "AppStream-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.115-1.el9_3.src as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src" }, "product_reference": "dotnet7.0-0:7.0.115-1.el9_3.src", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "relates_to_product_reference": "CRB-9.3.0.Z.MAIN" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-46233", "cwe": { "id": "CWE-916", "name": "Use of Password Hash With Insufficient Computational Effort" }, "discovery_date": "2023-10-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246369" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard", "title": "Vulnerability summary" }, { "category": "other", "text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46233" }, { "category": "external", "summary": "RHBZ#2246369", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46233" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233" }, { "category": "external", "summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T15:42:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0151" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" }, { "cve": "CVE-2024-0056", "cwe": { "id": "CWE-420", "name": "Unprotected Alternate Channel" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255384" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0056" }, { "category": "external", "summary": "RHBZ#2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0056" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T15:42:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0151" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)" }, { "cve": "CVE-2024-0057", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255386" } ], "notes": [ { "category": "description", "text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: X509 Certificates - Validation Bypass across Azure", "title": "Vulnerability summary" }, { "category": "other", "text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0057" }, { "category": "external", "summary": "RHBZ#2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0057" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T15:42:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0151" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: X509 Certificates - Validation Bypass across Azure" }, { "cve": "CVE-2024-21319", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-01-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2257566" } ], "notes": [ { "category": "description", "text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: .NET Denial of Service Vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21319" }, { "category": "external", "summary": "RHBZ#2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21319" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T15:42:10+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0151" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "AppStream-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el9_3.src", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el9_3.x86_64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.aarch64", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.ppc64le", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.s390x", "CRB-9.3.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el9_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "dotnet: .NET Denial of Service Vulnerability" } ] }
rhsa-2024_0157
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for .NET 7.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0157", "url": "https://access.redhat.com/errata/RHSA-2024:0157" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0157.json" } ], "title": "Red Hat Security Advisory: .NET 7.0 security update", "tracking": { "current_release_date": "2024-11-06T04:41:17+00:00", "generator": { "date": "2024-11-06T04:41:17+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2024:0157", "initial_release_date": "2024-01-10T18:38:11+00:00", "revision_history": [ { "date": "2024-01-10T18:38:11+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-01-10T18:38:11+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T04:41:17+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat CodeReady Linux Builder (v. 8)", "product": { "name": "Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "product_id": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "product_id": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "product_id": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "product": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "product_id": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "product": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "product_id": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.115-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "product_id": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "product": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "product_id": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.115-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "product": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "product_id": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.115-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.15-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.115-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "product": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "product_id": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.115-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.115-1.el8_9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dotnet7.0-0:7.0.115-1.el8_9.src", "product": { "name": "dotnet7.0-0:7.0.115-1.el8_9.src", "product_id": "dotnet7.0-0:7.0.115-1.el8_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0@7.0.115-1.el8_9?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.115-1.el8_9.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src" }, "product_reference": "dotnet7.0-0:7.0.115-1.el8_9.src", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.115-1.el8_9.src as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src" }, "product_reference": "dotnet7.0-0:7.0.115-1.el8_9.src", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-46233", "cwe": { "id": "CWE-916", "name": "Use of Password Hash With Insufficient Computational Effort" }, "discovery_date": "2023-10-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246369" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard", "title": "Vulnerability summary" }, { "category": "other", "text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46233" }, { "category": "external", "summary": "RHBZ#2246369", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46233" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233" }, { "category": "external", "summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0157" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" }, { "cve": "CVE-2024-0056", "cwe": { "id": "CWE-420", "name": "Unprotected Alternate Channel" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255384" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0056" }, { "category": "external", "summary": "RHBZ#2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0056" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0157" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)" }, { "cve": "CVE-2024-0057", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255386" } ], "notes": [ { "category": "description", "text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: X509 Certificates - Validation Bypass across Azure", "title": "Vulnerability summary" }, { "category": "other", "text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0057" }, { "category": "external", "summary": "RHBZ#2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0057" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0157" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: X509 Certificates - Validation Bypass across Azure" }, { "cve": "CVE-2024-21319", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-01-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2257566" } ], "notes": [ { "category": "description", "text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: .NET Denial of Service Vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21319" }, { "category": "external", "summary": "RHBZ#2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21319" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0157" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.15-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.115-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.115-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.115-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "dotnet: .NET Denial of Service Vulnerability" } ] }
rhsa-2024_0158
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.\n\nSecurity Fix(es):\n\n* dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS) (CVE-2024-0056)\n\n* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)\n\n* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0158", "url": "https://access.redhat.com/errata/RHSA-2024:0158" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0158.json" } ], "title": "Red Hat Security Advisory: .NET 6.0 security update", "tracking": { "current_release_date": "2024-11-06T04:41:06+00:00", "generator": { "date": "2024-11-06T04:41:06+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2024:0158", "initial_release_date": "2024-01-10T18:38:00+00:00", "revision_history": [ { "date": "2024-01-10T18:38:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-01-10T18:38:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T04:41:06+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat CodeReady Linux Builder (v. 8)", "product": { "name": "Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "product": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "product": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "product": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "product_id": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "product_id": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "product": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "product_id": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "product": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "product_id": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "product": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el8_9?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "product": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "product": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "product": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "product_id": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "product_id": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "product": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "product_id": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "product": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "product_id": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "product": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el8_9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "product": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "product_id": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "product": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "product": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "product_id": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "product": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "product_id": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "product": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "product_id": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "product": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "product_id": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.126-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "product": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "product_id": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "product": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "product_id": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.126-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "product": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "product_id": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.126-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.26-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "product": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.126-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "product": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "product_id": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.126-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "product": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "product_id": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-source-built-artifacts@6.0.126-1.el8_9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dotnet6.0-0:6.0.126-1.el8_9.src", "product": { "name": "dotnet6.0-0:6.0.126-1.el8_9.src", "product_id": "dotnet6.0-0:6.0.126-1.el8_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet6.0@6.0.126-1.el8_9?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-0:6.0.126-1.el8_9.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src" }, "product_reference": "dotnet6.0-0:6.0.126-1.el8_9.src", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64" }, "product_reference": "dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-0:6.0.126-1.el8_9.src as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src" }, "product_reference": "dotnet6.0-0:6.0.126-1.el8_9.src", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" }, "product_reference": "dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-46233", "cwe": { "id": "CWE-916", "name": "Use of Password Hash With Insufficient Computational Effort" }, "discovery_date": "2023-10-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246369" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard", "title": "Vulnerability summary" }, { "category": "other", "text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46233" }, { "category": "external", "summary": "RHBZ#2246369", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46233" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233" }, { "category": "external", "summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0158" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" }, { "cve": "CVE-2024-0056", "cwe": { "id": "CWE-420", "name": "Unprotected Alternate Channel" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255384" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This may allow the attacker to steal authentication credentials intended for the database server, even if the connection is established over an encrypted channel like TLS.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allows attackers to execute an adversary-in-the-middle (AiTM) attack, potentially enabling the theft of authentication credentials even when the connection is encrypted with protocols like TLS. This security lapse could lead to unauthorized access to sensitive databases, raising concerns about data breaches and the compromise of confidential information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0056" }, { "category": "external", "summary": "RHBZ#2255384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255384" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0056", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0056" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0056" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0158" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Information Disclosure: MD.SqlClient(MDS) \u0026 System.data.SQLClient (SDS)" }, { "cve": "CVE-2024-0057", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "discovery_date": "2023-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255386" } ], "notes": [ { "category": "description", "text": "A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app\u0027s typical authentication logic.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: X509 Certificates - Validation Bypass across Azure", "title": "Vulnerability summary" }, { "category": "other", "text": "The ability for an attacker to exploit this vulnerability by presenting an arbitrary untrusted certificate with malformed signatures can lead to a breach in the application\u0027s authentication logic. This loophole poses a serious threat, as it could lead to unauthorized access, data breaches, and the compromise of sensitive information.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-0057" }, { "category": "external", "summary": "RHBZ#2255386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255386" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-0057", "url": "https://www.cve.org/CVERecord?id=CVE-2024-0057" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0057" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0158" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: X509 Certificates - Validation Bypass across Azure" }, { "cve": "CVE-2024-21319", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-01-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2257566" } ], "notes": [ { "category": "description", "text": "A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: .NET Denial of Service Vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "This DoS vulnerability in .NET Core project templates utilizing JWT-based authentication tokens is considered a moderate issue due to its restricted impact. While unauthenticated clients can exploit the server\u0027s memory, potentially causing an out-of-memory condition and service disruption, the vulnerability does not lead to remote code execution or compromise sensitive data. Its exploitability is contingent on specific project configurations, limiting the scope of affected systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21319" }, { "category": "external", "summary": "RHBZ#2257566", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257566" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21319", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21319" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319" }, { "category": "external", "summary": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md", "url": "https://github.com/dotnet/core/blob/ce802c56fde3abe2ae14ad09a1b8991b6709c18b/release-notes/6.0/6.0.26/6.0.26.md" } ], "release_date": "2024-01-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-10T18:38:00+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0158" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-6.0-source-built-artifacts-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.26-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-6.0-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-0:6.0.126-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.126-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.126-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "dotnet: .NET Denial of Service Vulnerability" } ] }
rhsa-2024_0806
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for dotnet7.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.\n\nSecurity Fix(es):\n\n* dotnet: Denial of Service in SignalR server (CVE-2024-21386)\n\n* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0806", "url": "https://access.redhat.com/errata/RHSA-2024:0806" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2263085", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263085" }, { "category": "external", "summary": "2263086", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263086" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0806.json" } ], "title": "Red Hat Security Advisory: dotnet7.0 security update", "tracking": { "current_release_date": "2024-11-06T05:01:21+00:00", "generator": { "date": "2024-11-06T05:01:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2024:0806", "initial_release_date": "2024-02-13T18:55:24+00:00", "revision_history": [ { "date": "2024-02-13T18:55:24+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-02-13T18:55:24+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T05:01:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat CodeReady Linux Builder (v. 8)", "product": { "name": "Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el8_9?arch=aarch64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el8_9?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el8_9?arch=ppc64le" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el8_9?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el8_9?arch=x86_64" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el8_9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "product_id": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-runtime-7.0@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-7.0@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "product": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "product_id": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "product": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "product_id": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "product": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "product_id": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "product": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "product_id": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0@7.0.116-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "product": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "product_id": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-targeting-pack-7.0@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "product": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "product_id": "dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-templates-7.0@7.0.116-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "product": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "product_id": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debugsource@7.0.116-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product_id": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-apphost-pack-7.0-debuginfo@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product_id": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-hostfxr-7.0-debuginfo@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product_id": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-runtime-7.0-debuginfo@7.0.16-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "product": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "product_id": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-debuginfo@7.0.116-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "product": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "product_id": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0-debuginfo@7.0.116-1.el8_9?arch=s390x" } } }, { "category": "product_version", "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "product": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "product_id": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet-sdk-7.0-source-built-artifacts@7.0.116-1.el8_9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "dotnet7.0-0:7.0.116-1.el8_9.src", "product": { "name": "dotnet7.0-0:7.0.116-1.el8_9.src", "product_id": "dotnet7.0-0:7.0.116-1.el8_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/dotnet7.0@7.0.116-1.el8_9?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.116-1.el8_9.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src" }, "product_reference": "dotnet7.0-0:7.0.116-1.el8_9.src", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "AppStream-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64" }, "product_reference": "dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-0:7.0.116-1.el8_9.src as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src" }, "product_reference": "dotnet7.0-0:7.0.116-1.el8_9.src", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" }, "product_reference": "dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "relates_to_product_reference": "CRB-8.9.0.Z.MAIN" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-46233", "cwe": { "id": "CWE-916", "name": "Use of Password Hash With Insufficient Computational Effort" }, "discovery_date": "2023-10-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246369" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in crypto-js in how PBKDF2 is 1,000 times weaker than originally specified in 1993 and at least 1,300,000 times weaker than the current industry standard. This issue is because both default to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and default to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on the iteration count as a countermeasure to preimage and collision attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard", "title": "Vulnerability summary" }, { "category": "other", "text": "The vulnerability in crypto-js\u0027s PBKDF2 implementation represents a important CVE issue due to its fundamental impact on cryptographic security. PBKDF2 is widely used for password protection and signature generation, making it a core component of many security-critical systems. However, the default settings in crypto-js result in significantly weaker security than industry standards, with the algorithm being 1,000 times weaker than originally specified in 1993 and millions of times weaker than current recommendations. This weakness stems from the use of the insecure SHA1 hash algorithm and the default of only one iteration, both of which greatly diminish the resistance against various attacks. Consequently, attackers can exploit this vulnerability to create identical cryptographic signatures, potentially gaining unauthorized access to sensitive information or compromising system integrity. Given the widespread use of crypto-js and the important role of PBKDF2 in cryptographic operations, addressing this vulnerability is paramount to safeguarding against security breaches and maintaining trust in digital systems.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46233" }, { "category": "external", "summary": "RHBZ#2246369", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246369" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46233", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46233" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233" }, { "category": "external", "summary": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-02-13T18:55:24+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0806" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" }, { "cve": "CVE-2024-21386", "discovery_date": "2024-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2263085" } ], "notes": [ { "category": "description", "text": "A denial of service vulnerability is present in the .NET applications utilizing SignalR, which a malicious client can exploit. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service (DoS) attack by providing specially crafted input.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Denial of Service in SignalR server", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21386" }, { "category": "external", "summary": "RHBZ#2263085", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263085" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21386", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21386" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21386", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21386" } ], "release_date": "2024-02-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-02-13T18:55:24+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0806" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Denial of Service in SignalR server" }, { "cve": "CVE-2024-21404", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2263086" } ], "notes": [ { "category": "description", "text": "A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service (DoS) attack by providing specially crafted input.", "title": "Vulnerability description" }, { "category": "summary", "text": "dotnet: Denial of Service in X509Certificate2", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-21404" }, { "category": "external", "summary": "RHBZ#2263086", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263086" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-21404", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21404" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21404", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21404" } ], "release_date": "2024-02-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-02-13T18:55:24+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0806" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "AppStream-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:aspnetcore-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-apphost-pack-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-hostfxr-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-runtime-7.0-debuginfo-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-sdk-7.0-source-built-artifacts-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-targeting-pack-7.0-0:7.0.16-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet-templates-7.0-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-0:7.0.116-1.el8_9.src", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debuginfo-0:7.0.116-1.el8_9.x86_64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.aarch64", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.ppc64le", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.s390x", "CRB-8.9.0.Z.MAIN:dotnet7.0-debugsource-0:7.0.116-1.el8_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dotnet: Denial of Service in X509Certificate2" } ] }
ghsa-xwcq-pm8m-c4vf
Vulnerability from github
Impact
Summary
Crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both (1) defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005 and (2) defaults to one single iteration, a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks.
Potential Impact:
- If used to protect passwords, the impact is high.
- If used to generate signatures, the impact is high.
Probability / risk analysis / attack enumeration:
- [For at most $45,000][SHA1 is a Shambles], an attacker, given control of only the beginning of a crypto-js PBKDF2 input, can create a value which has identical cryptographic signature to any chosen known value.
- Due to the length extension attack on SHA1, we can create a value that has identical signature to any unknown value, provided it is prefixed by a known value. It does not matter if PBKDF2 applies 'salt' or 'pepper' or any other secret unknown to the attacker. It will still create an identical signature.
Update: PBKDF2 requires a pseudo-random function that takes two inputs, so HMAC-SHA1 is used rather than plain SHA1. HMAC is not affected by length extension attacks. However, by defaulting to a single PBKDF2 iteration, the hashes do not benefit from the extra computational complexity that PBKDF2 is supposed to provide. The resulting hashes therefore have little protection against an offline brute-force attack.
[SHA1 is a Shambles]: https://eprint.iacr.org/2020/014.pdf "SHA-1 is a Shambles: First Chosen-Prefix Collision on SHA-1 and Application to the PGP Web of Trust, Gaëtan Leurent and Thomas Peyrin"
crypto-js has 10,642 public users as displayed on NPM, today October 11th 2023. The number of transient dependents is likely several orders of magnitude higher.
A very rough GitHub search shows 432 files cross GitHub using PBKDF2 in crypto-js in Typescript or JavaScript, but not specifying any number of iterations.
Affected versions
All versions are impacted. This code has been the same since crypto-js was first created.
Further Cryptanalysis
The issue here is especially egregious because the length extension attack makes useless any secret that might be appended to the plaintext before calculating its signature.
Consider a scheme in which a secret is created for a user's username, and that secret is used to protect e.g. their passwords. Let's say that password is 'fake-password', and their username is 'example-username'.
To encrypt the user password via symmetric encryption we might do encrypt(plaintext: 'fake-password', encryption_key: cryptojs.pbkdf2(value: 'example username' + salt_or_pepper))
. By this means, we would, in theory, create an encryption_key
that can be determined from the public username, but which requires the secret salt_or_pepper
to generate. This is a common scheme for protecting passwords, as exemplified in bcrypt & scrypt. Because the encryption key is symmetric, we can use this derived key to also decrypt the ciphertext.
Because of the length extension issue, if the attacker obtains (via attack 1), a collision with 'example username', the attacker does not need to know salt_or_pepper
to decrypt their account data, only their public username.
Description
PBKDF2 is a key-derivation is a key-derivation function that is used for two main purposes: (1) to stretch or squash a variable length password's entropy into a fixed size for consumption by another cryptographic operation and (2) to reduce the chance of downstream operations recovering the password input (for example, for password storage).
Unlike the modern webcrypto standard, crypto-js does not throw an error when a number of iterations is not specified, and defaults to one single iteration. In the year 2000, when PBKDF2 was originally specified, the minimum number of iterations suggested was set at 1,000. Today, OWASP recommends 1,300,000:
https://github.com/brix/crypto-js/blob/4dcaa7afd08f48cd285463b8f9499cdb242605fa/src/pbkdf2.js#L22-L26
Patches
No available patch. The package is not maintained.
Workarounds
Consult the OWASP PBKDF2 Cheatsheet. Configure to use SHA256 with at least 250,000 iterations.
Coordinated disclosure
This issue was simultaneously submitted to crypto-js and crypto-es on the 23rd of October 2023.
Caveats
This issue was found in a security review that was not scoped to crypto-js. This report is not an indication that crypto-js has undergone a formal security assessment by the author.
{ "affected": [ { "package": { "ecosystem": "npm", "name": "crypto-js" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "4.2.0" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2023-46233" ], "database_specific": { "cwe_ids": [ "CWE-327", "CWE-328", "CWE-916" ], "github_reviewed": true, "github_reviewed_at": "2023-10-25T21:15:52Z", "nvd_published_at": "2023-10-25T21:15:10Z", "severity": "CRITICAL" }, "details": "### Impact\n#### Summary\nCrypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and [at least 1,300,000 times weaker than current industry standard][OWASP PBKDF2 Cheatsheet]. This is because it both (1) defaults to [SHA1][SHA1 wiki], a cryptographic hash algorithm considered insecure [since at least 2005][Cryptanalysis of SHA-1] and (2) defaults to [one single iteration][one iteration src], a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to [preimage][preimage attack] and [collision][collision attack] attacks.\n\nPotential Impact:\n\n1. If used to protect passwords, the impact is high.\n2. If used to generate signatures, the impact is high.\n\nProbability / risk analysis / attack enumeration:\n\n1. [For at most $45,000][SHA1 is a Shambles], an attacker, given control of only the beginning of a crypto-js PBKDF2 input, can create a value which has _identical cryptographic signature_ to any chosen known value.\n4. Due to the [length extension attack] on SHA1, we can create a value that has identical signature to any _unknown_ value, provided it is prefixed by a known value. It does not matter if PBKDF2 applies \u0027[salt][cryptographic salt]\u0027 or \u0027[pepper][cryptographic pepper]\u0027 or any other secret unknown to the attacker. It will still create an identical signature.\n\nUpdate: PBKDF2 requires a pseudo-random function that takes two inputs, so HMAC-SHA1 is used rather than plain SHA1. HMAC is not affected by [length extension attacks][Length Extension attack]. However, by defaulting to a single PBKDF2 iteration, the hashes do not benefit from the extra computational complexity that PBKDF2 is supposed to provide. The resulting hashes therefore have little protection against an offline brute-force attack.\n \n[cryptographic salt]: https://en.wikipedia.org/wiki/Salt_(cryptography) \"Salt (cryptography), Wikipedia\"\n[cryptographic pepper]: https://en.wikipedia.org/wiki/Pepper_(cryptography) \"Pepper (cryptography), Wikipedia\"\n[SHA1 wiki]: https://en.wikipedia.org/wiki/SHA-1 \"SHA-1, Wikipedia\"\n[Cryptanalysis of SHA-1]: https://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html \"Cryptanalysis of SHA-1\"\n[one iteration src]: https://github.com/brix/crypto-js/blob/1da3dabf93f0a0435c47627d6f171ad25f452012/src/pbkdf2.js#L22-L26 \"crypto-js/src/pbkdf2.js lines 22-26\"\n[collision attack]: https://en.wikipedia.org/wiki/Hash_collision \"Collision Attack, Wikipedia\"\n[preimage attack]: https://en.wikipedia.org/wiki/Preimage_attack \"Preimage Attack, Wikipedia\"\n[SHA1 is a Shambles]: https://eprint.iacr.org/2020/014.pdf \"SHA-1 is a Shambles: First Chosen-Prefix Collision on SHA-1\nand Application to the PGP Web of Trust, Ga\u00ebtan Leurent and Thomas Peyrin\"\n[Length Extension attack]: https://en.wikipedia.org/wiki/Length_extension_attack \"Length extension attack, Wikipedia\"\n\ncrypto-js has 10,642 public users [as displayed on NPM][crypto-js, NPM], today October 11th 2023. The number of transient dependents is likely several orders of magnitude higher.\n\nA very rough GitHub search[ shows 432 files][GitHub search: affected files] cross GitHub using PBKDF2 in crypto-js in Typescript or JavaScript, but not specifying any number of iterations.\n\n[OWASP PBKDF2 Cheatsheet]: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2 \"OWASP PBKDF2 Cheatsheet\"\n[crypto-js, NPM]: https://www.npmjs.com/package/crypto-js \"crypto-js on NPM\"\n[GitHub search: affected files]: https://github.com/search?q=%22crypto-js%22+AND+pbkdf2+AND+%28lang%3AJavaScript+OR+lang%3ATypeScript%29++NOT+%22iterations%22\u0026type=code\u0026p=2 \"GitHub search: crypto-js AND pbkdf2 AND (lang:JavaScript OR lang:TypeScript) NOT iterations\"\n\n#### Affected versions\nAll versions are impacted. This code has been the same since crypto-js was first created.\n\n#### Further Cryptanalysis\n\nThe issue here is especially egregious because the length extension attack makes useless any secret that might be appended to the plaintext before calculating its signature.\n\nConsider a scheme in which a secret is created for a user\u0027s username, and that secret is used to protect e.g. their passwords. Let\u0027s say that password is \u0027fake-password\u0027, and their username is \u0027example-username\u0027.\n\nTo encrypt the user password via symmetric encryption we might do `encrypt(plaintext: \u0027fake-password\u0027, encryption_key: cryptojs.pbkdf2(value: \u0027example username\u0027 + salt_or_pepper))`. By this means, we would, in theory, create an `encryption_key` that can be determined from the public username, but which requires the secret `salt_or_pepper` to generate. This is a common scheme for protecting passwords, as exemplified in bcrypt \u0026 scrypt. Because the encryption key is symmetric, we can use this derived key to also decrypt the ciphertext.\n\nBecause of the length extension issue, if the attacker obtains (via attack 1), a collision with \u0027example username\u0027, the attacker _does not need to know_ `salt_or_pepper` to decrypt their account data, only their public username.\n\n### Description\n\nPBKDF2 is a key-derivation is a key-derivation function that is used for two main purposes: (1) to stretch or squash a variable length password\u0027s entropy into a fixed size for consumption by another cryptographic operation and (2) to reduce the chance of downstream operations recovering the password input (for example, for password storage).\n\nUnlike the modern [webcrypto](https://w3c.github.io/webcrypto/#pbkdf2-operations) standard, crypto-js does not throw an error when a number of iterations is not specified, and defaults to one single iteration. In the year 2000, when PBKDF2 was originally specified, the minimum number of iterations suggested was set at 1,000. Today, [OWASP recommends 1,300,000][OWASP PBKDF2 Cheatsheet]:\n\nhttps://github.com/brix/crypto-js/blob/4dcaa7afd08f48cd285463b8f9499cdb242605fa/src/pbkdf2.js#L22-L26\n\n### Patches\nNo available patch. The package is not maintained.\n\n### Workarounds\nConsult the [OWASP PBKDF2 Cheatsheet]. Configure to use SHA256 with at least 250,000 iterations.\n\n### Coordinated disclosure\nThis issue was simultaneously submitted to [crypto-js](https://github.com/brix/crypto-js) and [crypto-es](https://github.com/entronad/crypto-es) on the 23rd of October 2023.\n\n### Caveats\n\nThis issue was found in a security review that was _not_ scoped to crypto-js. This report is not an indication that crypto-js has undergone a formal security assessment by the author.\n\n", "id": "GHSA-xwcq-pm8m-c4vf", "modified": "2024-02-01T16:30:29Z", "published": "2023-10-25T21:15:52Z", "references": [ { "type": "WEB", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46233" }, { "type": "WEB", "url": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a" }, { "type": "PACKAGE", "url": "https://github.com/brix/crypto-js" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "type": "CVSS_V3" } ], "summary": "crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard" }
gsd-2023-46233
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2023-46233", "id": "GSD-2023-46233" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-46233" ], "details": "crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks. If used to protect passwords, the impact is high. If used to generate signatures, the impact is high. Version 4.2.0 contains a patch for this issue. As a workaround, configure crypto-js to use SHA256 with at least 250,000 iterations.", "id": "GSD-2023-46233", "modified": "2023-12-13T01:20:53.224958Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security-advisories@github.com", "ID": "CVE-2023-46233", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "crypto-js", "version": { "version_data": [ { "version_affected": "=", "version_value": "\u003c 4.2.0" } ] } } ] }, "vendor_name": "brix" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks. If used to protect passwords, the impact is high. If used to generate signatures, the impact is high. Version 4.2.0 contains a patch for this issue. As a workaround, configure crypto-js to use SHA256 with at least 250,000 iterations." } ] }, "impact": { "cvss": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "cweId": "CWE-328", "lang": "eng", "value": "CWE-328: Use of Weak Hash" } ] }, { "description": [ { "cweId": "CWE-916", "lang": "eng", "value": "CWE-916: Use of Password Hash With Insufficient Computational Effort" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "refsource": "MISC", "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" }, { "name": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a", "refsource": "MISC", "url": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a" }, { "name": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html", "refsource": "MISC", "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html" } ] }, "source": { "advisory": "GHSA-xwcq-pm8m-c4vf", "discovery": "UNKNOWN" } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:crypto-js_project:crypto-js:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "4.2.0", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "security-advisories@github.com", "ID": "CVE-2023-46233" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a \u0027strength\u0027 or \u0027difficulty\u0027 value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks. If used to protect passwords, the impact is high. If used to generate signatures, the impact is high. Version 4.2.0 contains a patch for this issue. As a workaround, configure crypto-js to use SHA256 with at least 250,000 iterations." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-327" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf", "refsource": "MISC", "tags": [ "Vendor Advisory" ], "url": "https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf" }, { "name": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a", "refsource": "MISC", "tags": [ "Patch" ], "url": "https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a" }, { "name": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html", "refsource": "", "tags": [], "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html" } ] } }, "impact": { "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.2 } }, "lastModifiedDate": "2023-11-27T20:15Z", "publishedDate": "2023-10-25T21:15Z" } } }
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.