Linux · Security advisory · February 10, 2021

RHSA-2021:0474: Security update for 4 packages

RHSA-2021:0474, released February 10, 2021, fixes 1 CVE across 4 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine1 publicly disclosed

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0334

88th percentile

Fixed package versions

Product	Release	Fixed in
dotnet-host-fxr-2.1	RHEL 8	0:2.1.25-1.el8_3
dotnet-runtime-2.1	RHEL 8	0:2.1.25-1.el8_3
dotnet-sdk-2.1	RHEL 8	0:2.1.521-1.el8_3
dotnet-sdk-2.1.5xx	RHEL 8	0:2.1.521-1.el8_3

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2021-1721	.NET Core and Visual Studio Denial of Service Vulnerability		6.5	0.0334	DisclosedExploitation Less Likely

Also fixes CVE-2021-1721

ELSA-2021-0474
dotnet-host-fxr-2.1, dotnet-runtime-2.1, dotnet-sdk-2.1 and 1 more on ol 8
ELSA-2021-0471
aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1 and 5 more on ol 8
ELSA-2021-0476
aspnetcore-runtime-5.0, aspnetcore-targeting-pack-5.0, dotnet and 8 more on ol 8
RHSA-2021:0471
aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1 and 5 more on RHEL 8
RHSA-2021:0476
aspnetcore-runtime-5.0, aspnetcore-targeting-pack-5.0, dotnet and 8 more on RHEL 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2021:0474

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo