Linux · Security advisory · October 9, 2024

ALSA-2024:7868: Security update for 15 packages

ALSA-2024:7868, released October 9, 2024, fixes 4 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0308
87th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
aspnetcore-runtime-8.0almalinux 88.0.10-1.el8_10
aspnetcore-runtime-dbg-8.0almalinux 88.0.10-1.el8_10
aspnetcore-targeting-pack-8.0almalinux 88.0.10-1.el8_10
dotnetalmalinux 88.0.110-1.el8_10
dotnet-apphost-pack-8.0almalinux 88.0.10-1.el8_10
dotnet-hostalmalinux 88.0.10-1.el8_10
dotnet-hostfxr-8.0almalinux 88.0.10-1.el8_10
dotnet-runtime-8.0almalinux 88.0.10-1.el8_10
dotnet-runtime-dbg-8.0almalinux 88.0.10-1.el8_10
dotnet-sdk-8.0almalinux 88.0.110-1.el8_10
dotnet-sdk-8.0-source-built-artifactsalmalinux 88.0.110-1.el8_10
dotnet-sdk-dbg-8.0almalinux 88.0.110-1.el8_10
dotnet-targeting-pack-8.0almalinux 88.0.10-1.el8_10
dotnet-templates-8.0almalinux 88.0.110-1.el8_10
netstandard-targeting-pack-2.1almalinux 88.0.110-1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-43485 .NET and Visual Studio Denial of Service Vulnerability 7.5 0.0308 Exploitation Less Likely
High CVE-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability 7.5 0.0296 Exploitation Less Likely
High CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability 7.5 0.0290 Exploitation Less Likely
High CVE-2024-38229 .NET and Visual Studio Remote Code Execution Vulnerability 8.1 0.0208 Exploitation Less Likely
Showing 1 to 4 of 4 1