Synopsis

Moderate: .NET Core on Red Hat Enterprise Linux security update

Type/Severity

Security Advisory: Moderate

Topic

An update for rh-dotnet20-dotnet, rh-dotnetcore10-dotnetcore, and rh-dotnetcore11-dotnetcore is now available for .NET Core on Red Hat Enterprise Linux.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

.NET Core is a managed software framework. It implements a subset of the .NET framework APIs and includes a CLR implementation.

New versions of .NET Core that address several security vulnerabilities are now available. The updated versions are .NET Core 1.0.9, 1.1.6, and 2.0.5.

Security Fix(es):

• .NET Core: Improper processing of XML documents can cause a denial of service (CVE-2018-0764)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• dotNET on RHEL (for RHEL Server) 1 x86_64
• dotNET on RHEL (for RHEL Workstation) 1 x86_64
• dotNET on RHEL (for RHEL Compute Node) 1 x86_64

Fixes

• BZ - 1533730 - CVE-2018-0764 .NET Core: Improper processing of XML documents can cause a denial of service

CVEs

• CVE-2018-0764

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://github.com/dotnet/announcements/issues/52

dotNET on RHEL (for RHEL Server) 1

SRPM
rh-dotnet20-dotnet-2.0.5-1.el7.src.rpm	SHA-256: 4c89e079a9ab6a7a77bc06ff1dfda15c37b5e537ebb191b49d1849065dada661
rh-dotnetcore10-dotnetcore-1.0.9-1.el7.src.rpm	SHA-256: 42324442c5570ada619bcf5d966c8e9fd561b781bc519c0e594564b46eca8d9b
rh-dotnetcore11-dotnetcore-1.1.6-1.el7.src.rpm	SHA-256: 3fcbfcb97ad7d77a1ccd9933ce581112857491c93a23b40e40c44ead624c0a27
x86_64
rh-dotnet20-dotnet-2.0.5-1.el7.x86_64.rpm	SHA-256: 825568fb371b51cfc576592968024a4832e57ebcaa3a071cd9355702ebab8579
rh-dotnet20-dotnet-debuginfo-2.0.5-1.el7.x86_64.rpm	SHA-256: e2dde5b4547381fd4d0e26bf329ba03e9be33cef81b44d65b527468be401ab0d
rh-dotnet20-dotnet-host-2.0.5-1.el7.x86_64.rpm	SHA-256: 8472bf7970c1765603c62f6d2aef1b47b6f33328ae371c4e4af429778477354d
rh-dotnet20-dotnet-runtime-2.0-2.0.5-1.el7.x86_64.rpm	SHA-256: 998db03e482a41c0962d124c0f5aebb2710e955d81b6d87d50f76134c6bbd639
rh-dotnet20-dotnet-sdk-2.1-2.1.4-1.el7.x86_64.rpm	SHA-256: 29dd2ef48a87a5b26e0967c35a3c664919d8cc9ef0d129a169cbb895e18322b5
rh-dotnetcore10-dotnetcore-1.0.9-1.el7.x86_64.rpm	SHA-256: 6ff06bc46a650f4c35d8e2dbc87d0eeb14b92f0fb4ff5ebd5a9999efc92252df
rh-dotnetcore10-dotnetcore-debuginfo-1.0.9-1.el7.x86_64.rpm	SHA-256: c86c906066e1ba90f9d15c5f81d8aa7938976495a9caa9f4ba520f6cc3a1ac7d
rh-dotnetcore11-dotnetcore-1.1.6-1.el7.x86_64.rpm	SHA-256: 7b94395dc5d2d594096cb4434aaa30d6c0abed439c565baf2e3042aaaa438e0c
rh-dotnetcore11-dotnetcore-debuginfo-1.1.6-1.el7.x86_64.rpm	SHA-256: 2c909f053875ebba3c0fe45473314dc4451943b3e7de6d05ba155ff3a6fbe54f

dotNET on RHEL (for RHEL Workstation) 1

SRPM
rh-dotnet20-dotnet-2.0.5-1.el7.src.rpm	SHA-256: 4c89e079a9ab6a7a77bc06ff1dfda15c37b5e537ebb191b49d1849065dada661
rh-dotnetcore10-dotnetcore-1.0.9-1.el7.src.rpm	SHA-256: 42324442c5570ada619bcf5d966c8e9fd561b781bc519c0e594564b46eca8d9b
rh-dotnetcore11-dotnetcore-1.1.6-1.el7.src.rpm	SHA-256: 3fcbfcb97ad7d77a1ccd9933ce581112857491c93a23b40e40c44ead624c0a27
x86_64
rh-dotnet20-dotnet-2.0.5-1.el7.x86_64.rpm	SHA-256: 825568fb371b51cfc576592968024a4832e57ebcaa3a071cd9355702ebab8579
rh-dotnet20-dotnet-debuginfo-2.0.5-1.el7.x86_64.rpm	SHA-256: e2dde5b4547381fd4d0e26bf329ba03e9be33cef81b44d65b527468be401ab0d
rh-dotnet20-dotnet-host-2.0.5-1.el7.x86_64.rpm	SHA-256: 8472bf7970c1765603c62f6d2aef1b47b6f33328ae371c4e4af429778477354d
rh-dotnet20-dotnet-runtime-2.0-2.0.5-1.el7.x86_64.rpm	SHA-256: 998db03e482a41c0962d124c0f5aebb2710e955d81b6d87d50f76134c6bbd639
rh-dotnet20-dotnet-sdk-2.1-2.1.4-1.el7.x86_64.rpm	SHA-256: 29dd2ef48a87a5b26e0967c35a3c664919d8cc9ef0d129a169cbb895e18322b5
rh-dotnetcore10-dotnetcore-1.0.9-1.el7.x86_64.rpm	SHA-256: 6ff06bc46a650f4c35d8e2dbc87d0eeb14b92f0fb4ff5ebd5a9999efc92252df
rh-dotnetcore10-dotnetcore-debuginfo-1.0.9-1.el7.x86_64.rpm	SHA-256: c86c906066e1ba90f9d15c5f81d8aa7938976495a9caa9f4ba520f6cc3a1ac7d
rh-dotnetcore11-dotnetcore-1.1.6-1.el7.x86_64.rpm	SHA-256: 7b94395dc5d2d594096cb4434aaa30d6c0abed439c565baf2e3042aaaa438e0c
rh-dotnetcore11-dotnetcore-debuginfo-1.1.6-1.el7.x86_64.rpm	SHA-256: 2c909f053875ebba3c0fe45473314dc4451943b3e7de6d05ba155ff3a6fbe54f

dotNET on RHEL (for RHEL Compute Node) 1

SRPM
rh-dotnet20-dotnet-2.0.5-1.el7.src.rpm	SHA-256: 4c89e079a9ab6a7a77bc06ff1dfda15c37b5e537ebb191b49d1849065dada661
rh-dotnetcore10-dotnetcore-1.0.9-1.el7.src.rpm	SHA-256: 42324442c5570ada619bcf5d966c8e9fd561b781bc519c0e594564b46eca8d9b
rh-dotnetcore11-dotnetcore-1.1.6-1.el7.src.rpm	SHA-256: 3fcbfcb97ad7d77a1ccd9933ce581112857491c93a23b40e40c44ead624c0a27
x86_64
rh-dotnet20-dotnet-2.0.5-1.el7.x86_64.rpm	SHA-256: 825568fb371b51cfc576592968024a4832e57ebcaa3a071cd9355702ebab8579
rh-dotnet20-dotnet-debuginfo-2.0.5-1.el7.x86_64.rpm	SHA-256: e2dde5b4547381fd4d0e26bf329ba03e9be33cef81b44d65b527468be401ab0d
rh-dotnet20-dotnet-host-2.0.5-1.el7.x86_64.rpm	SHA-256: 8472bf7970c1765603c62f6d2aef1b47b6f33328ae371c4e4af429778477354d
rh-dotnet20-dotnet-runtime-2.0-2.0.5-1.el7.x86_64.rpm	SHA-256: 998db03e482a41c0962d124c0f5aebb2710e955d81b6d87d50f76134c6bbd639
rh-dotnet20-dotnet-sdk-2.1-2.1.4-1.el7.x86_64.rpm	SHA-256: 29dd2ef48a87a5b26e0967c35a3c664919d8cc9ef0d129a169cbb895e18322b5
rh-dotnetcore10-dotnetcore-1.0.9-1.el7.x86_64.rpm	SHA-256: 6ff06bc46a650f4c35d8e2dbc87d0eeb14b92f0fb4ff5ebd5a9999efc92252df
rh-dotnetcore10-dotnetcore-debuginfo-1.0.9-1.el7.x86_64.rpm	SHA-256: c86c906066e1ba90f9d15c5f81d8aa7938976495a9caa9f4ba520f6cc3a1ac7d
rh-dotnetcore11-dotnetcore-1.1.6-1.el7.x86_64.rpm	SHA-256: 7b94395dc5d2d594096cb4434aaa30d6c0abed439c565baf2e3042aaaa438e0c
rh-dotnetcore11-dotnetcore-debuginfo-1.1.6-1.el7.x86_64.rpm	SHA-256: 2c909f053875ebba3c0fe45473314dc4451943b3e7de6d05ba155ff3a6fbe54f