[ALSA-2025:0381] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2025-01-17
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12. Security Fix(es): * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172) * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173) * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173) * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176) * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-8.0-8.0.12-1.el8_10.aarch64.rpm 0b83b65c9677c656388a7606bc60482a407ce78a27ef340320869c1a239609f5
aarch64 aspnetcore-runtime-8.0-8.0.12-1.el8_10.aarch64.rpm 199d23ebf1f6b3f210590b315618b50c9538bb8ff76d10faefc6e250921624a9
aarch64 dotnet-sdk-dbg-8.0-8.0.112-1.el8_10.aarch64.rpm 24d7a98e420fd9a50cf279664736c581ec21f1711fd4758987f7eeda710392e6
aarch64 dotnet-templates-8.0-8.0.112-1.el8_10.aarch64.rpm 35cbf850b8989d21481a00999ff2b03d6e8d5c26eedc94e22f4b3fba24b59d2e
aarch64 dotnet-sdk-8.0-8.0.112-1.el8_10.aarch64.rpm 54d6f3de7f02c728cf226bb5bad4da317c0c7505152050814d8d47648a626fcc
aarch64 dotnet-hostfxr-8.0-8.0.12-1.el8_10.aarch64.rpm 5770c6440c6776a27531013f4d6ce6d83f85a2256403862cc4e3bb0f8b312ac2
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.112-1.el8_10.aarch64.rpm 697d7c06f78eac1c9b2c66178f9bb4e1236461912e55b931a42eff6d01a388a9
aarch64 aspnetcore-targeting-pack-8.0-8.0.12-1.el8_10.aarch64.rpm 9ac4e570ffb852a2fa9f68198f2a2fe3631aee1f7d977d124c395e546c8cbb73
aarch64 dotnet-runtime-dbg-8.0-8.0.12-1.el8_10.aarch64.rpm a8c97cbc06645522aca35d004abf4be8f7490079013ab187a250a477b5644ad3
aarch64 dotnet-apphost-pack-8.0-8.0.12-1.el8_10.aarch64.rpm b50e2e7be457ce61f20d3e72cd651e82b109489e4c50353d4ecd884e69f4f7c6
aarch64 aspnetcore-runtime-dbg-8.0-8.0.12-1.el8_10.aarch64.rpm bad6668d7b0ad051e5821ea6b29d738d7f5025be8071ebb3db4a794fc3ba06aa
aarch64 dotnet-targeting-pack-8.0-8.0.12-1.el8_10.aarch64.rpm be10861b905537f2113ac80b021b5309415c08c9fbd07f6f5dec68fd1cd84ab0
ppc64le dotnet-templates-8.0-8.0.112-1.el8_10.ppc64le.rpm 29fd125270d7c8b563e25dba4495bc14352bd1aee55adfcda621933a5314dda7
ppc64le aspnetcore-targeting-pack-8.0-8.0.12-1.el8_10.ppc64le.rpm 2c3a19b4cb1eb4daf1535d21c89ab49bc30b1bc1b78acc25c1ae908f8b660487
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.112-1.el8_10.ppc64le.rpm 2d80e05dcb54885435f0fab5b70abb274d619a27efdd7593beab12b74ba2eab0
ppc64le dotnet-apphost-pack-8.0-8.0.12-1.el8_10.ppc64le.rpm 6f7daecd7c5d5503af0cf676c160307b674bc7eb69a1103a75cf8c40df1348d0
ppc64le dotnet-sdk-dbg-8.0-8.0.112-1.el8_10.ppc64le.rpm 7161cdbf7bf17dcc81f3ab4b1c7f26a27e3307402c30ed5e6f81b0599eb2e386
ppc64le dotnet-runtime-8.0-8.0.12-1.el8_10.ppc64le.rpm 7563ccfd68f267a31da275291c3556447f37ec03e6f872e98f1e6e6795921df2
ppc64le dotnet-hostfxr-8.0-8.0.12-1.el8_10.ppc64le.rpm 98514c66ea7fde623e709e5fdcaa0d23b7453664ac12530c9d23f2e93eb24db8
ppc64le dotnet-runtime-dbg-8.0-8.0.12-1.el8_10.ppc64le.rpm a8bda74ababddb3a419138fdd43c140293d5b2818daadd0c62322ceb0306d1a1
ppc64le aspnetcore-runtime-8.0-8.0.12-1.el8_10.ppc64le.rpm c4af77a2140e4ab8639c372c315e253ed23ee1d02158392aa2db4022bdb0efd2
ppc64le aspnetcore-runtime-dbg-8.0-8.0.12-1.el8_10.ppc64le.rpm d161058286994caf64b0a955195028469b47bd591594036e83bb8387da5a7b65
ppc64le dotnet-targeting-pack-8.0-8.0.12-1.el8_10.ppc64le.rpm e55820f3347e114a21700505a86213aaba0a7e18ed4791c700882991e67e906c
ppc64le dotnet-sdk-8.0-8.0.112-1.el8_10.ppc64le.rpm fdba14bb775aa953cb248708a02b427cbd91ceb3453bbd76cf0f695a57c82215
s390x aspnetcore-runtime-dbg-8.0-8.0.12-1.el8_10.s390x.rpm 0f65ce2bf2ad4a950e464a494b3eb3b7a136797961b9b32dca56c2a14c46e206
s390x dotnet-runtime-8.0-8.0.12-1.el8_10.s390x.rpm 2ab4aebe695bec1f58584e03fa4a685a51e8220755a0757ac285464023380f87
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.112-1.el8_10.s390x.rpm 2c4c8e2568d4b68c4545a93a061eaa2b72f61527ae317207c0f0b75e4ee84489
s390x dotnet-hostfxr-8.0-8.0.12-1.el8_10.s390x.rpm 51c0e30e584cc7866ce87f584ffa35068a67b832fe960c3766c6f395e03808c1
s390x dotnet-targeting-pack-8.0-8.0.12-1.el8_10.s390x.rpm 5b2640d90b49bc3a216d51043226aac5593c799edfdc05e0a556b336e4cfb709
s390x aspnetcore-runtime-8.0-8.0.12-1.el8_10.s390x.rpm 6f88ede7c4ff935b6d47da9824687d322030b0baab35c1029578e17e0fae853e
s390x dotnet-sdk-dbg-8.0-8.0.112-1.el8_10.s390x.rpm 86123e0553e9959abc19fb17a971d764e40f1b978a87f4ff80c00c2c7367fb0b
s390x aspnetcore-targeting-pack-8.0-8.0.12-1.el8_10.s390x.rpm 903e28d3ebde80bd51fbdfbedcf29724a06853047201ac40dd0f73e2217268a2
s390x dotnet-templates-8.0-8.0.112-1.el8_10.s390x.rpm a537215aca2894b2f0c72da5ec1c6e18989384378ac0de977d09254735948893
s390x dotnet-sdk-8.0-8.0.112-1.el8_10.s390x.rpm c283278d19bff90f089821c0c5c2a2f1d3b5666e86fc73ccc5a937e2dc8dfaad
s390x dotnet-runtime-dbg-8.0-8.0.12-1.el8_10.s390x.rpm e3af14403912f94c3556e51871b2c12dbaa5e603590a1d121be86bc00901dce3
s390x dotnet-apphost-pack-8.0-8.0.12-1.el8_10.s390x.rpm f87233f51886a9ab1deaaf35fc2239f113e2299519e78a9bdfabdcf72b55fe23
x86_64 dotnet-sdk-8.0-8.0.112-1.el8_10.x86_64.rpm 0227e01f552a48ebae803ebc38313d319d45b00c4a8d62f4ebe9af7efc6750b0
x86_64 aspnetcore-runtime-8.0-8.0.12-1.el8_10.x86_64.rpm 0985d92d33d90b9e393b01ba044737520143dbed0029e07eee12c59ad340e1c5
x86_64 dotnet-hostfxr-8.0-8.0.12-1.el8_10.x86_64.rpm 38e56690d9da0139b85cfdf93b0d6c2ad63a1579cab824fe3e3e1adf0150518c
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.112-1.el8_10.x86_64.rpm 8c53a33e87df251130c20ad4dae237ab96e2787399a0824b83462c5d0580be7e
x86_64 dotnet-templates-8.0-8.0.112-1.el8_10.x86_64.rpm 93e80570fb3e8c5c2b0dc17fd45c83c86da17db4404c8ea4f453d59c2de61ccf
x86_64 dotnet-runtime-8.0-8.0.12-1.el8_10.x86_64.rpm bca2e408efc0a9b738fe7631a77e8a51c6812fefc996fa9e74c6e4866f085077
x86_64 aspnetcore-runtime-dbg-8.0-8.0.12-1.el8_10.x86_64.rpm c6787a63ae204b7a7b18ee594f97c0d2089be9258e5a7e7ff0424877b5b0611a
x86_64 dotnet-sdk-dbg-8.0-8.0.112-1.el8_10.x86_64.rpm cb5bf1ea741c715b5cd66f8e0b5ee6eb4a1a0d0c45ff7a7e4d18bb7fc4d43fe3
x86_64 aspnetcore-targeting-pack-8.0-8.0.12-1.el8_10.x86_64.rpm de9f26fcdc3a23d91bdc2ad77d40e935ad8f82097a29218ad7e17b49aec3fea7
x86_64 dotnet-targeting-pack-8.0-8.0.12-1.el8_10.x86_64.rpm e28f9b6864daffcc70eebed03f8c5ecdd3c867c749c0701c45892bbd1000a03b
x86_64 dotnet-apphost-pack-8.0-8.0.12-1.el8_10.x86_64.rpm eaf62fd978d2c3994309ffd89593e3c2981d2e1d5320955029674911238b8ccb
x86_64 dotnet-runtime-dbg-8.0-8.0.12-1.el8_10.x86_64.rpm fa4932202ad0c24e539a420be9ef9c755bede7f1b15104d8ccd72d4c6f90a1cf
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.