Red Hat Product Errata RHBA-2020:1291 - Bug Fix Advisory
Issued:
2020-04-02
Updated:
2020-04-02

RHBA-2020:1291 - Bug Fix Advisory

Synopsis

Updated .NET Core containers for the new .NET version and security fixes

Type/Severity

Bug Fix Advisory

Topic

.NET Core has been updated in all container images for a new security release,
as well as CVE fixes.

Description

.NET Core has been updated in all container images for the new security release as well as several CVE fixes.

The new versions are:

2.1.17 Runtime
2.1.513 SDK
3.1.3 Runtime
3.1.103 SDK

Solution

The Asynchronous Group container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

Affected Products

  • dotNET on RHEL (for RHEL Server) 1 x86_64
  • dotNET on RHEL (for RHEL Workstation) 1 x86_64
  • dotNET on RHEL (for RHEL Compute Node) 1 x86_64

Fixes

  • BZ - 1807349 - CVE-2020-10531 ICU: Integer overflow in UnicodeString::doAppend()

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.