Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | aspnetcore-runtime-6.0 | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | aspnetcore-targeting-pack-6.0 | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-apphost-pack-6.0 | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-hostfxr-6.0 | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-hostfxr-6.0-debuginfo | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-runtime-6.0 | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-runtime-6.0-debuginfo | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-sdk-6.0 | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-sdk-6.0-debuginfo | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-targeting-pack-6.0 | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-templates-6.0 | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet6.0 | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet6.0-debuginfo | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet6.0-debugsource | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-hostfxr-6.0-debuginfo | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-runtime-6.0-debuginfo | 0:6.0.35-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-sdk-6.0-debuginfo | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-sdk-6.0-source-built-artifacts | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet6.0-debuginfo | 0:6.0.135-2.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet6.0-debugsource | 0:6.0.135-2.el9_5 |
Vulnerabilities 1
-
High 7.5
Denial of service when handling a request with many HTTP headers in ws
ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (…
References
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_9550.json
-
report
https://access.redhat.com/security/cve/CVE-2024-37890
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2292777
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-37890
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-37890
-
article
https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q