Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 | rh-dotnetcore10-dotnetcore | 0:1.0.14-1.el7 |
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 | rh-dotnetcore10-dotnetcore-debuginfo | 0:1.0.14-1.el7 |
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 | rh-dotnetcore11-dotnetcore | 0:1.1.11-2.el7 |
| Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 | rh-dotnetcore11-dotnetcore-debuginfo | 0:1.1.11-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21 | 0:2.1-7.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21-dotnet | 0:2.1.504-1.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21-dotnet-debuginfo | 0:2.1.504-1.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21-dotnet-host | 0:2.1.8-1.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21-dotnet-runtime-2.1 | 0:2.1.8-1.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21-dotnet-sdk-2.1 | 0:2.1.504-1.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21-dotnet-sdk-2.1.5xx | 0:2.1.504-1.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.1::el7 | rh-dotnet21-runtime | 0:2.1-7.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22 | 0:2.2-3.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-dotnet | 0:2.2.104-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-dotnet-debuginfo | 0:2.2.104-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-dotnet-host | 0:2.2.2-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-dotnet-host-fxr-2.2 | 0:2.2.2-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-dotnet-runtime-2.2 | 0:2.2.2-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-dotnet-sdk-2.2 | 0:2.2.104-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-dotnet-sdk-2.2.1xx | 0:2.2.104-2.el7 |
| Red Hat · Rhel Dotnet 2 rhel_dotnet:2.2::el7 | rh-dotnet22-runtime | 0:2.2-3.el7 |
Vulnerabilities 1
-
Medium 5.9
Improper Input Validation in .Net Framework API's
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1673891
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0349.json
-
report
https://access.redhat.com/security/cve/CVE-2019-0657
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-0657
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-0657