Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
219
security advisorydenial of serviceimportantRocky Linux 10 RLSA-2026-4504.NET 9.1 Framework Enhancements for Stability
Important: .NET 9.0 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:4450", "synopsis": "Important: .NET 9.0 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for dotnet9.0.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es):\n\n* .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)\n\n* asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2446134", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2446134", "description": ""}, {"ticket": "2446098", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2446098", "description": ""}], "cves": [{"name": "CVE-2026-26127", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26127", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-125"}, {"name": "CVE-2026-26130", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26130", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-770"}], "references": [], "publishedAt": "2026-03-13T12:06:58.174665Z", "rpms": {"Rocky Linux10": {"nvras": ["dotnet-sdk-9.0-source-built-artifacts-0:9.0.115-1.el10_1.aarch64.rpm", "dotnet-hostfxr-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet-runtime-9.0-debuginfo-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-sdk-9.0-0:9.0.115-1.el10_1.s390x.rpm", "dotnet-sdk-9.0-0:9.0.115-1.el10_1.aarch64.rpm", "dotnet-apphost-pack-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet-sdk-9.0-0:9.0.115-1.el10_1.ppc64le.rpm", "dotnet-hostfxr-9.0-debuginfo-0:9.0.14-1.el10_1.ppc64le.rpm", "netstandard-targeting-pack-2.1-0:9.0.115-1.el10_1.x86_64.rpm", "dotnet-runtime-9.0-debuginfo-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet-sdk-dbg-9.0-0:9.0.115-1.el10_1.ppc64le.rpm", "aspnetcore-runtime-dbg-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet-hostfxr-9.0-debuginfo-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-apphost-pack-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "netstandard-targeting-pack-2.1-0:9.0.115-1.el10_1.s390x.rpm", "dotnet-runtime-dbg-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "dotnet-apphost-pack-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet-runtime-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "dotnet-targeting-pack-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet9.0-debugsource-0:9.0.115-1.el10_1.ppc64le.rpm", "dotnet-sdk-9.0-source-built-artifacts-0:9.0.115-1.el10_1.ppc64le.rpm", "aspnetcore-targeting-pack-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet-templates-9.0-0:9.0.115-1.el10_1.aarch64.rpm", "dotnet-runtime-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet-templates-9.0-0:9.0.115-1.el10_1.s390x.rpm", "dotnet-hostfxr-9.0-debuginfo-0:9.0.14-1.el10_1.x86_64.rpm", "netstandard-targeting-pack-2.1-0:9.0.115-1.el10_1.ppc64le.rpm", "dotnet-runtime-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet9.0-debugsource-0:9.0.115-1.el10_1.aarch64.rpm", "dotnet-sdk-aot-9.0-debuginfo-0:9.0.115-1.el10_1.x86_64.rpm", "dotnet-hostfxr-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "dotnet9.0-debugsource-0:9.0.115-1.el10_1.s390x.rpm", "dotnet-sdk-9.0-debuginfo-0:9.0.115-1.el10_1.x86_64.rpm", "aspnetcore-runtime-dbg-9.0-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-sdk-9.0-debuginfo-0:9.0.115-1.el10_1.aarch64.rpm","dotnet-sdk-9.0-source-built-artifacts-0:9.0.115-1.el10_1.x86_64.rpm", "dotnet-sdk-dbg-9.0-0:9.0.115-1.el10_1.s390x.rpm", "dotnet-targeting-pack-9.0-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-targeting-pack-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "dotnet-hostfxr-9.0-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-runtime-dbg-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet-sdk-aot-9.0-0:9.0.115-1.el10_1.x86_64.rpm", "dotnet-runtime-dbg-9.0-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-sdk-9.0-0:9.0.115-1.el10_1.x86_64.rpm", "dotnet-sdk-9.0-debuginfo-0:9.0.115-1.el10_1.ppc64le.rpm", "aspnetcore-runtime-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "aspnetcore-targeting-pack-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "aspnetcore-runtime-dbg-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "aspnetcore-runtime-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet-runtime-9.0-debuginfo-0:9.0.14-1.el10_1.aarch64.rpm", "dotnet-sdk-dbg-9.0-0:9.0.115-1.el10_1.x86_64.rpm", "dotnet-sdk-9.0-debuginfo-0:9.0.115-1.el10_1.s390x.rpm", "dotnet-hostfxr-9.0-debuginfo-0:9.0.14-1.el10_1.aarch64.rpm", "dotnet-apphost-pack-9.0-debuginfo-0:9.0.14-1.el10_1.x86_64.rpm", "aspnetcore-runtime-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet9.0-debugsource-0:9.0.115-1.el10_1.x86_64.rpm", "dotnet-sdk-9.0-source-built-artifacts-0:9.0.115-1.el10_1.s390x.rpm", "dotnet-sdk-aot-9.0-debuginfo-0:9.0.115-1.el10_1.aarch64.rpm", "dotnet-apphost-pack-9.0-debuginfo-0:9.0.14-1.el10_1.aarch64.rpm", "aspnetcore-runtime-dbg-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "aspnetcore-targeting-pack-9.0-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-apphost-pack-9.0-debuginfo-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-templates-9.0-0:9.0.115-1.el10_1.ppc64le.rpm", "netstandard-targeting-pack-2.1-0:9.0.115-1.el10_1.aarch64.rpm", "dotnet-apphost-pack-9.0-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-runtime-9.0-0:9.0.14-1.el10_1.s390x.rpm", "dotnet-targeting-pack-9.0-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet-sdk-aot-9.0-0:9.0.115-1.el10_1.aarch64.rpm", "aspnetcore-targeting-pack-9.0-0:9.0.14-1.el10_1.aarch64.rpm", "aspnetcore-runtime-9.0-0:9.0.14-1.el10_1.s390x.rpm","dotnet-runtime-9.0-debuginfo-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet-runtime-dbg-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet-hostfxr-9.0-0:9.0.14-1.el10_1.x86_64.rpm", "dotnet9.0-0:9.0.115-1.el10_1.src.rpm", "dotnet-apphost-pack-9.0-debuginfo-0:9.0.14-1.el10_1.ppc64le.rpm", "dotnet-sdk-dbg-9.0-0:9.0.115-1.el10_1.aarch64.rpm", "dotnet-templates-9.0-0:9.0.115-1.el10_1.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for .NET 9.0 in Rocky Linux 10 addresses denial of service risks.. Rocky Linux security, .NET 9.0 update, denial of service fix. . Severity: Important. LinuxSecurity.com Team
Mar 13, 2026
•Important
Rocky Linux
219
security advisorysecurity updateDoS issueRocky Linux 8 RLSA-2024:1308 Moderate: .NET 7.0 Denial of Service
Moderate: .NET 7.0 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:1308", "synopsis": "Moderate: .NET 7.0 security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for dotnet7.0.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17.\n\nSecurity Fix(es):\n\n* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2268266", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2268266", "description": ""}], "cves": [{"name": "CVE-2024-21392", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-21392", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-03-27T04:34:32.999941Z", "rpms": {"Rocky Linux 8": {"nvras": ["aspnetcore-runtime-7.0-0:7.0.17-1.el8_9.aarch64.rpm", "aspnetcore-runtime-7.0-0:7.0.17-1.el8_9.x86_64.rpm", "aspnetcore-targeting-pack-7.0-0:7.0.17-1.el8_9.aarch64.rpm", "aspnetcore-targeting-pack-7.0-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet7.0-0:7.0.117-1.el8_9.src.rpm", "dotnet7.0-debuginfo-0:7.0.117-1.el8_9.aarch64.rpm", "dotnet7.0-debuginfo-0:7.0.117-1.el8_9.x86_64.rpm", "dotnet7.0-debugsource-0:7.0.117-1.el8_9.aarch64.rpm", "dotnet7.0-debugsource-0:7.0.117-1.el8_9.x86_64.rpm","dotnet-apphost-pack-7.0-0:7.0.17-1.el8_9.aarch64.rpm", "dotnet-apphost-pack-7.0-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet-apphost-pack-7.0-debuginfo-0:7.0.17-1.el8_9.aarch64.rpm", "dotnet-apphost-pack-7.0-debuginfo-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet-hostfxr-7.0-0:7.0.17-1.el8_9.aarch64.rpm", "dotnet-hostfxr-7.0-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet-hostfxr-7.0-debuginfo-0:7.0.17-1.el8_9.aarch64.rpm", "dotnet-hostfxr-7.0-debuginfo-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet-runtime-7.0-0:7.0.17-1.el8_9.aarch64.rpm", "dotnet-runtime-7.0-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet-runtime-7.0-debuginfo-0:7.0.17-1.el8_9.aarch64.rpm", "dotnet-runtime-7.0-debuginfo-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet-sdk-7.0-0:7.0.117-1.el8_9.aarch64.rpm", "dotnet-sdk-7.0-0:7.0.117-1.el8_9.x86_64.rpm", "dotnet-sdk-7.0-debuginfo-0:7.0.117-1.el8_9.aarch64.rpm", "dotnet-sdk-7.0-debuginfo-0:7.0.117-1.el8_9.x86_64.rpm", "dotnet-sdk-7.0-source-built-artifacts-0:7.0.117-1.el8_9.aarch64.rpm", "dotnet-sdk-7.0-source-built-artifacts-0:7.0.117-1.el8_9.x86_64.rpm", "dotnet-targeting-pack-7.0-0:7.0.17-1.el8_9.aarch64.rpm", "dotnet-targeting-pack-7.0-0:7.0.17-1.el8_9.x86_64.rpm", "dotnet-templates-7.0-0:7.0.117-1.el8_9.aarch64.rpm", "dotnet-templates-7.0-0:7.0.117-1.el8_9.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A fresh .NET 7.0 security patch released for Rocky Linux 8 tackling potential DoS vulnerabilities. Crucial for maintaining system integrity and functionality.. Rocky Linux 8,.NET 7.0,Denial of Service update. . Severity: Medium. LinuxSecurity.com Team
Mar 27, 2024
•Medium
Rocky Linux
98
security advisorycriticalsoftware updateRed Hat: RHSA-2021-2037-01 Critical: DotNet 3.1 Privilege Escalation
An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: dotnet3.1 security and bugfix update Advisory ID: RHSA-2021:2037-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:2037 Issue date: 2021-05-19 CVE Names: CVE-2021-31204 ==================================================================== 1. Summary: An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - x86_64 3. Description: .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.115 and .NET Core Runtime 3.1.15. Security Fix(es): * dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204) In order for the update to be complete, self-contained applications deployed using previous versions need to be recompiled and redeployed. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described inthis advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1956815 - CVE-2021-31204 dotnet: .NET Core single-file application privilege escalation 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: dotnet3.1-3.1.115-1.el8_4.src.rpm x86_64: aspnetcore-runtime-3.1-3.1.15-1.el8_4.x86_64.rpm aspnetcore-targeting-pack-3.1-3.1.15-1.el8_4.x86_64.rpm dotnet-apphost-pack-3.1-3.1.15-1.el8_4.x86_64.rpm dotnet-apphost-pack-3.1-debuginfo-3.1.15-1.el8_4.x86_64.rpm dotnet-hostfxr-3.1-3.1.15-1.el8_4.x86_64.rpm dotnet-hostfxr-3.1-debuginfo-3.1.15-1.el8_4.x86_64.rpm dotnet-runtime-3.1-3.1.15-1.el8_4.x86_64.rpm dotnet-runtime-3.1-debuginfo-3.1.15-1.el8_4.x86_64.rpm dotnet-sdk-3.1-3.1.115-1.el8_4.x86_64.rpm dotnet-sdk-3.1-debuginfo-3.1.115-1.el8_4.x86_64.rpm dotnet-targeting-pack-3.1-3.1.15-1.el8_4.x86_64.rpm dotnet-templates-3.1-3.1.115-1.el8_4.x86_64.rpm dotnet3.1-debuginfo-3.1.115-1.el8_4.x86_64.rpm dotnet3.1-debugsource-3.1.115-1.el8_4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-31204 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYKThkNzjgjWX9erEAQiF+Q//Z2tK3morp1GI0rTTbvf8ODON0vQxKXQo 9SF32Osl4dHmCJqvCeuuZY2MyP1J2IrM7H1qry49L2TRwWsToaIi+8VtIqc+5yTG 1UqKavnrk7uj5bkusB4cLFKeq840i4Q3EfICMVhGz/MWIfGlwEFm77nDYQljbpEd k1n402DLtvKP0zhpxeLbgxOsoz3+cYGd6I/w0kxhkcdFrEQ27KLHkp58hyj/poOk hMzu5ppbV3IilgmZmDGpxymBJ6LoPWld0+AdWRRKxIo1pYH+36f2q2ZyltWSuPCm eayD6x7cM1UUtOspr44407QVxDYKv2TO1nIdVPtWs2wO0fz9GmmmUGV3vfZCxJtf Vy+1HFtQzKOmH9WAF0hJ0g5zNVzPoXrN8NkPi5DYyV2VIJz5MBJLgw3UmdCrceaO zpCLNpntNwG5CQIWKHLBEifyjOprz9n9VfimmFcuu2gnYthObfkMw6fBoRGwyKFV fVMF46mkMsmVMHgbxgY0nu2U/9g6Rjm3TS+NCLuP2l2e2jWDhRdk6I4OiYfuEhGW wHUoCjNbfdqY6kiBf46BEuQvMSNglwb1B6qHf2DJmMMV5RtjHHjvqYWqNJNIctDG WY7zhBHIqRNItKkW2SRdf1QBV8LwY/8iJmFibqGHOiu4SidVOcCRoCo3tpgI0U3I ugFvyCI7eOk=YzuO -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 19, 2021
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!