Linux · Security advisory · October 12, 2022

RLSA-2022:6913: dotnet6.0 security update

RLSA-2022:6913, released October 12, 2022, fixes 1 CVE in dotnet6.0 (version 0:6.0.110-1.el9_0). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0129

70th percentile

Fixed package versions

Product	Release	Fixed in
dotnet6.0	rocky 9	0:6.0.110-1.el9_0

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2022-41032	NuGet Client Elevation of Privilege Vulnerability		7.8	0.0129	Exploitation Less Likely

Also fixes CVE-2022-41032

ELSA-2022-8434
aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet-apphost-pack-7.0 and 6 more on ol 9
ELSA-2022-7826
aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet-apphost-pack-7.0 and 6 more on ol 8
ALSA-2022:8434
aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet-apphost-pack-7.0 and 8 more on almalinux 9
RHSA-2022:8434
aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet-apphost-pack-7.0 and 8 more on RHEL 9
ALSA-2022:7826
aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet and 9 more on almalinux 8
RHSA-2022:7826
aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet and 9 more on RHEL 8
ELSA-2022-6911
aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet and 9 more on ol 8
ELSA-2022-6913
aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0 and 8 more on ol 9

Vendor advisory

https://errata.rockylinux.org/RLSA-2022:6913

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo