Linux · Security advisory · June 15, 2022

RLSA-2022:5061: dotnet3.1 security update

RLSA-2022:5061, released June 15, 2022, fixes 1 CVE in dotnet3.1 (version 0:3.1.420-1.el8_6). None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0612

93rd percentile

Fixed package versions

Product	Release	Fixed in
dotnet3.1	rocky 8	0:3.1.420-1.el8_6

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2022-30184	.NET and Visual Studio Information Disclosure Vulnerability		5.5	0.0612	Exploitation Less Likely

Also fixes CVE-2022-30184

ELSA-2022-5050
aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0 and 8 more on ol 9
ELSA-2022-5046
aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet and 9 more on ol 8
RLSA-2022:5046
dotnet6.0 on rocky 8
ELSA-2022-5061
aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1 and 6 more on ol 8
RHSA-2022:5046
aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet and 9 more on RHEL 8
RHSA-2022:5050
aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0 and 8 more on RHEL 9
RHSA-2022:5061
aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1 and 6 more on RHEL 8
KB5015424
.NET Core 3.1

Vendor advisory

https://errata.rockylinux.org/RLSA-2022:5061

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo