[ALSA-2024:3345] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2024-05-29
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5. Security Fix(es): * dotnet: stack buffer overrun in Double Parse (CVE-2024-30045) * dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-hostfxr-8.0-8.0.5-1.el8_10.aarch64.rpm 19b6cd5a9225f9f5745a4c5f8687f60ce4bb4ae2cda6b81487297afc25fc5aae
aarch64 dotnet-runtime-8.0-8.0.5-1.el8_10.aarch64.rpm 2fbb80815bc131129a24a5a28ac12eb8ebea8349ebf5da1c6f1f321774564029
aarch64 dotnet-sdk-8.0-8.0.105-1.el8_10.aarch64.rpm 3dde1d0d12947fc43a79c8cd9e59b282a69e18c723b63b3289e2625a2f2adb1f
aarch64 aspnetcore-targeting-pack-8.0-8.0.5-1.el8_10.aarch64.rpm 3f449a49443a891474903a0472466ac3965a13fad5ba7c3999e8f86ee62ff229
aarch64 dotnet-sdk-dbg-8.0-8.0.105-1.el8_10.aarch64.rpm 4182c748c1d1784fe8aecbb6db148be182b2512cf882cb56512001b7ac1944cc
aarch64 dotnet-8.0.105-1.el8_10.aarch64.rpm 429f3492e80762a178a1241e67f5779e7bc50a1f80a2b09d749c3a5ade88e72c
aarch64 netstandard-targeting-pack-2.1-8.0.105-1.el8_10.aarch64.rpm 4b23ebab67ce3d49a6d57484a64da0aa6c9a775ba55d4b646b1b664f5caf13da
aarch64 dotnet-runtime-dbg-8.0-8.0.5-1.el8_10.aarch64.rpm 5acc03fe82052d826b9b1c81c235fe5bcc7668ae4d5a36c40bc8b709610e6d94
aarch64 dotnet-templates-8.0-8.0.105-1.el8_10.aarch64.rpm 6ad1ee352ffe72643e1b2ed9750390c0e841a1f853b700dc77660bdce5c9c307
aarch64 dotnet-targeting-pack-8.0-8.0.5-1.el8_10.aarch64.rpm 6c665b3d7e0d288178d3d41da5a4d90892e9a1b38e6e30b3ab2c0ca6062ec775
aarch64 dotnet-apphost-pack-8.0-8.0.5-1.el8_10.aarch64.rpm 7314357d3702e35c1c2b74ca7ae2decc81b0f2b5c4f3d1461de0fe6e91d29676
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el8_10.aarch64.rpm ad1fd75497c6cb218a89fce788182fc8475a38c3e54599a643f7f18bef8387df
aarch64 aspnetcore-runtime-8.0-8.0.5-1.el8_10.aarch64.rpm d60ec1d7f1b3f64247f700a52bf2da9d1d33fb2d9bfb84f177d72aefac9be9eb
aarch64 dotnet-host-8.0.5-1.el8_10.aarch64.rpm d7158eefb3ac0436409200b048e06c049d5943fb2c5bca3fa5c7c196d82eed98
aarch64 aspnetcore-runtime-dbg-8.0-8.0.5-1.el8_10.aarch64.rpm f4b475465d26c6092d0e457df1cc4a6f2e7cae466bf1fc6aee972107dc7d005c
ppc64le aspnetcore-targeting-pack-8.0-8.0.5-1.el8_10.ppc64le.rpm 19cfe884f2eb4f9a1845ed5c969b2329f553a1187c35337f6996262b37f538d8
ppc64le netstandard-targeting-pack-2.1-8.0.105-1.el8_10.ppc64le.rpm 1caaf0859c0fc398558238646a25642f4ab8e6e4110dc767988b3a02283bb615
ppc64le dotnet-8.0.105-1.el8_10.ppc64le.rpm 1ce1986218692b4d8af6f39f5d72bc5cd5c79bfd693aa3ab5f2870da163de914
ppc64le dotnet-templates-8.0-8.0.105-1.el8_10.ppc64le.rpm 52a4c4fa6351a2606128c69a810953a36f0063f6682b3be5b7c99f9e93a8ebf7
ppc64le aspnetcore-runtime-8.0-8.0.5-1.el8_10.ppc64le.rpm 64fb7b56dc9060d17da713e86c2b5df091b1fc3dc7d4229409faa2574bbeff0d
ppc64le dotnet-hostfxr-8.0-8.0.5-1.el8_10.ppc64le.rpm 8b6594a9e2ae28af79d2a8478f623a969ec5a3646a3a1ceb7e3f9e129be5331d
ppc64le dotnet-apphost-pack-8.0-8.0.5-1.el8_10.ppc64le.rpm 9746e326d01964ddbbde9f1d2a347c0e3ef00f57bda388572e7a9f68a5320b90
ppc64le dotnet-runtime-8.0-8.0.5-1.el8_10.ppc64le.rpm 9abc8ff651702b67ef88f50eb4d74f886c15666fa90df8c40b2decbd7d0d8d88
ppc64le aspnetcore-runtime-dbg-8.0-8.0.5-1.el8_10.ppc64le.rpm b016d2585a65e15e9a64a7075e3d5b176fbaf0d89a562319beae59e760d5291e
ppc64le dotnet-runtime-dbg-8.0-8.0.5-1.el8_10.ppc64le.rpm b645244919c8381e76963ab00ce394404873440a0015b0d20a1b7d0227875009
ppc64le dotnet-sdk-dbg-8.0-8.0.105-1.el8_10.ppc64le.rpm b886bb863b45725fa0da5b09df3645f74e67974a79d86569b623ca0f3f77f2ad
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el8_10.ppc64le.rpm b8b4e941a94e215194add38f7e95fed4578540f6f48473aec12597436ff03cbb
ppc64le dotnet-targeting-pack-8.0-8.0.5-1.el8_10.ppc64le.rpm bcedd4396faab14b76281ba6b8e34eb968f04fdca1d229868fd47aab1a024d92
ppc64le dotnet-host-8.0.5-1.el8_10.ppc64le.rpm bcf9e395b27fbfa5adaf7e02e0436a4a0d9afaaa12a72dbedaff651b9a82d5f9
ppc64le dotnet-sdk-8.0-8.0.105-1.el8_10.ppc64le.rpm d8e13f6c8187ee2f2805f98b62ab4da2f059df597a10713cec9eb3208f972182
s390x dotnet-apphost-pack-8.0-8.0.5-1.el8_10.s390x.rpm 0663c4aa9908af90140bf98076be0300264e9dee642d10ceae37ca7486a3998b
s390x aspnetcore-runtime-8.0-8.0.5-1.el8_10.s390x.rpm 2eac142dffb4946ed62cc098528b3a186250140c2ae4d951c6f7b18227c84e70
s390x dotnet-host-8.0.5-1.el8_10.s390x.rpm 3373f5dd3e2b7babbc9bf02ed4e9fffd3870d076a4e502a2e660f3c0967c0942
s390x dotnet-hostfxr-8.0-8.0.5-1.el8_10.s390x.rpm 47a2038b0147b81ef27e33865daf99a3c588351e37f0d45af48d785b1c3ee1d6
s390x dotnet-8.0.105-1.el8_10.s390x.rpm 4912b54506f7e946fe3cc0f7fc66690ced023bf069d22e48a3ca2294211f4052
s390x netstandard-targeting-pack-2.1-8.0.105-1.el8_10.s390x.rpm 4c538b8485d0772c7855fa1b9c03feddf18dfe5d4455b1560d53e633e21faa47
s390x dotnet-sdk-8.0-8.0.105-1.el8_10.s390x.rpm 5ead999a3471081f5a40656641714f0652653dab9d80e8bf565db8999558b0d6
s390x dotnet-templates-8.0-8.0.105-1.el8_10.s390x.rpm 78b66f38fbc61992bdf6aca22a7262cdbb2656d315f32d5d7c20eb3be2324511
s390x dotnet-runtime-dbg-8.0-8.0.5-1.el8_10.s390x.rpm b28c26a9936b52bfde07d3abd76435da17d2edf22ac1459f377b714cadb59fc3
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el8_10.s390x.rpm cc684a138ad4ae66c1a06e1933c9f38076ae41205f4d33dcad3ddc31726cfe97
s390x dotnet-runtime-8.0-8.0.5-1.el8_10.s390x.rpm d04b472c53c88f20c12b04ca6e73cbc9bd71339151ec4beb6cb97d36082fb497
s390x aspnetcore-targeting-pack-8.0-8.0.5-1.el8_10.s390x.rpm d95e10cb01e72eb6a5106d77c81b2563ddc53b82ed8bb14071c3f2de849bbe10
s390x dotnet-targeting-pack-8.0-8.0.5-1.el8_10.s390x.rpm d991e8c8dc143279e56428a36bda68bd89b230194a308aef617408682f4d08e7
s390x dotnet-sdk-dbg-8.0-8.0.105-1.el8_10.s390x.rpm f8ff08e1e3da8bb214524fd4290d74b8a7f6c70ce023194c5c092494bbc41c53
s390x aspnetcore-runtime-dbg-8.0-8.0.5-1.el8_10.s390x.rpm fa61d9483313c83481652d9ad93115366e740a7ec6f0026c9e010d1d163d2a13
x86_64 dotnet-targeting-pack-8.0-8.0.5-1.el8_10.x86_64.rpm 015d947d6b0d4c4512bfa162de748b7cb7b56e624cdffa28790862a6650099a8
x86_64 dotnet-sdk-8.0-8.0.105-1.el8_10.x86_64.rpm 1d4f1342c5245f6d31d60e831513795c5173883cb2e4665bf218e0a9873153e2
x86_64 dotnet-runtime-8.0-8.0.5-1.el8_10.x86_64.rpm 1efbfb9211a59cb3ad6df7b593e1005cad777905e0abbbb57c3da497812948f3
x86_64 dotnet-hostfxr-8.0-8.0.5-1.el8_10.x86_64.rpm 24f21ebb13a0b9eaae94c5f3dccebcf7e19169821065920182dadcf91e0496fe
x86_64 dotnet-8.0.105-1.el8_10.x86_64.rpm 27acb97a06ef8ce53fd6c9205a3633f514d244581459e9340eec20e508c1de9e
x86_64 dotnet-apphost-pack-8.0-8.0.5-1.el8_10.x86_64.rpm 6454c5122d268c437bfa3d551f49fc0831dab38abafc839d5ee2b463973d287b
x86_64 aspnetcore-runtime-dbg-8.0-8.0.5-1.el8_10.x86_64.rpm 7d57f69ed3d3b656abda4b47681f23cf8fcb1e4204cbfc121756b4006fca9131
x86_64 dotnet-sdk-dbg-8.0-8.0.105-1.el8_10.x86_64.rpm 8231caf835365112a3d6e93fdb35cb3238a1a4b1caf4d04fc891696de28b6615
x86_64 dotnet-host-8.0.5-1.el8_10.x86_64.rpm 8df8774de29453691523f2ef96833554d547366ff36129df4a9d31f593b4ebe9
x86_64 dotnet-templates-8.0-8.0.105-1.el8_10.x86_64.rpm 9ef9623c094d4ab518ab3a79d32ee4bf1fc496844d6b8fb95703c9938d7c1e95
x86_64 aspnetcore-runtime-8.0-8.0.5-1.el8_10.x86_64.rpm ad1800529cf4d73f397cfb24387dcfa0788c5fc892fb5368086bfc166186a4bc
x86_64 dotnet-runtime-dbg-8.0-8.0.5-1.el8_10.x86_64.rpm b402f9e6bc0044511e8dcc41b14341bf0a86aac91de3c7013bcb00afca1f1a7f
x86_64 aspnetcore-targeting-pack-8.0-8.0.5-1.el8_10.x86_64.rpm d6052977041bfdfd68d8ced245822fc69fc2621d0ba541a29fccdbbe6595c502
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el8_10.x86_64.rpm ef25087640202bb57435d0cdf40e38a567347c11c327f7cf2f62f743f3e344fa
x86_64 netstandard-targeting-pack-2.1-8.0.105-1.el8_10.x86_64.rpm fe377f75d54daf489e204b6713d441db956b16292ca4e0810d913932691c3f78
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.