[ALSA-2025:2667] Important: .NET 9.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2025-03-17
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-9.0.104-1.el8_10.aarch64.rpm 17c99dc14175a3ee44cc964d388a104edd0a52ee9aa374724072f76fe08b9e97
aarch64 dotnet-apphost-pack-9.0-9.0.3-1.el8_10.aarch64.rpm 2cd46392b146b3f2bba8ab44b2067b4484b0dacc082df56bbac3583076fbb7d4
aarch64 netstandard-targeting-pack-2.1-9.0.104-1.el8_10.aarch64.rpm 62e1596640acf804111f0c7fce1ae9d2e7ebeed745e5a28d9a0dd98bdcce5538
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el8_10.aarch64.rpm 650968562e19a1f4c65ef5497b7adc4c481a52d0b2052205a71eb5c4d2692901
aarch64 dotnet-sdk-dbg-9.0-9.0.104-1.el8_10.aarch64.rpm 695c7b5e6f8a794ac3b869b6532ca3856f9dd0e20fbba92b7d151182a779103d
aarch64 dotnet-sdk-aot-9.0-9.0.104-1.el8_10.aarch64.rpm 69e8e63fa9691f457f18633025356d60b0e1829aae6a623239172cc39bab4b3c
aarch64 aspnetcore-runtime-9.0-9.0.3-1.el8_10.aarch64.rpm 720252b900dc3a76191d64efb0f2425440048e278c20e8e1636bff5083f3a1ab
aarch64 dotnet-sdk-9.0-9.0.104-1.el8_10.aarch64.rpm 728839f566be1c0e429e3678ffc93aab9244f6c075c10eb54fdbf7d702e26e3e
aarch64 dotnet-runtime-9.0-9.0.3-1.el8_10.aarch64.rpm 7804c508fd0f4f05f4e81402ae8c1f57c6d9f8ca3204f69e504d5ca1aabdc2cf
aarch64 dotnet-templates-9.0-9.0.104-1.el8_10.aarch64.rpm 78e60fc2d588303935f587ec565d1da827d31ec099b8f92d5b62001542ab41a6
aarch64 dotnet-hostfxr-9.0-9.0.3-1.el8_10.aarch64.rpm 9280d23e54a41e2ca47d3f5f2a9e64909cf1ebb59c7b8f83aeff0e7b79710ffe
aarch64 aspnetcore-runtime-dbg-9.0-9.0.3-1.el8_10.aarch64.rpm 9d2bece479c53b641894c50534fdef0e19e30d2cb61dabf6bf82097dade9d228
aarch64 dotnet-runtime-dbg-9.0-9.0.3-1.el8_10.aarch64.rpm 9ffcce4317cecfda923dd5c9477272149cc323fa27ea6d79d62a25e761449fae
aarch64 dotnet-targeting-pack-9.0-9.0.3-1.el8_10.aarch64.rpm ae91848017f211263ef36ad520ecf9029f7cfe73e30cc80c777a2810d15e53c9
aarch64 dotnet-host-9.0.3-1.el8_10.aarch64.rpm c5b377dec0857b9e99cb151463f436b39d2a018f428db8da8b8cef86cbe2113c
aarch64 aspnetcore-targeting-pack-9.0-9.0.3-1.el8_10.aarch64.rpm c95f47a9c701b2b34c03aa5d16772576e115bcd3017d3afcef54b6e2e92e6d52
ppc64le dotnet-targeting-pack-9.0-9.0.3-1.el8_10.ppc64le.rpm 0317feec7c08123726c6aa386a53de736b9f3b74288003b06e5bb896e889f82e
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el8_10.ppc64le.rpm 1ffc018f377c4998176e7b84890343b0749901d05e7342bb49e6fbd14c95c6e0
ppc64le dotnet-apphost-pack-9.0-9.0.3-1.el8_10.ppc64le.rpm 2631db893c5c4e1f2e2ba4c70d3f416af8bab2b489e877599106800a8d3ff82c
ppc64le dotnet-runtime-9.0-9.0.3-1.el8_10.ppc64le.rpm 275ebc25efd0aaed13633b1d2bfb0cec7fcf948f8413fb705931934a50ec7ed8
ppc64le netstandard-targeting-pack-2.1-9.0.104-1.el8_10.ppc64le.rpm 457a6a0210bab1eaed936741cdedddfef6885c9f537355d44e6203214bd3761b
ppc64le dotnet-sdk-9.0-9.0.104-1.el8_10.ppc64le.rpm 47e016b72bec5383d50072df91af12da5fd39b7ea1871d7732af8d1752a47778
ppc64le dotnet-runtime-dbg-9.0-9.0.3-1.el8_10.ppc64le.rpm 6aff522119a9bde23138458ab9bd31faf06f2186d4f9aca8d1e594389417d951
ppc64le dotnet-9.0.104-1.el8_10.ppc64le.rpm 7d477cfbf99bec6a446dac1d6131aa89d9e1c1d1eac5b109f459e802d1a5a6c8
ppc64le dotnet-sdk-dbg-9.0-9.0.104-1.el8_10.ppc64le.rpm 7f5d37e44a619e01fc19d125b2224a3ebdf3fbd631b4aaf835eae9410ac49ae3
ppc64le dotnet-host-9.0.3-1.el8_10.ppc64le.rpm bc177454d8a1a983bbba30db42f792ca6b0ac0c79bcc67fbe60a5dcc5ee60c85
ppc64le aspnetcore-targeting-pack-9.0-9.0.3-1.el8_10.ppc64le.rpm c75318093f09f0c20513327d9f50ce00032f06154de20ab49e88dd4c87f0752e
ppc64le aspnetcore-runtime-9.0-9.0.3-1.el8_10.ppc64le.rpm c77145bf063344e91a14b670addebee4aaa817c917e8d345fffe848b3f34e93b
ppc64le dotnet-templates-9.0-9.0.104-1.el8_10.ppc64le.rpm d03635cac065cd6647ae9be86f2f154f84e5f0860a8f99da6703cb756a08de86
ppc64le dotnet-hostfxr-9.0-9.0.3-1.el8_10.ppc64le.rpm f203df829b9c691941aa0a9c7e2c339e2b56ccea62a48ea81ec8ff2856857603
ppc64le aspnetcore-runtime-dbg-9.0-9.0.3-1.el8_10.ppc64le.rpm f3047c8b2cfe906630b5c8ab8d92d0e88f3937047e1e5663a814f8497f793ffc
s390x dotnet-host-9.0.3-1.el8_10.s390x.rpm 0c708ca66e4004fd8d8e7130b93db9106e66cebd0a4068765878afbc63372891
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el8_10.s390x.rpm 1077531ae40c262a7b984585605a7a953f4c5051bdd68ae58fc31c214389b015
s390x aspnetcore-runtime-dbg-9.0-9.0.3-1.el8_10.s390x.rpm 2ff9c557c56348990febbd6d35660d3905d2c869397e3f02c01b2cc026ba9b35
s390x aspnetcore-targeting-pack-9.0-9.0.3-1.el8_10.s390x.rpm 41ccbf997808fb70bcea68ba22deb4e6f343590be6837e57c8ff147b9fbb6088
s390x netstandard-targeting-pack-2.1-9.0.104-1.el8_10.s390x.rpm 4acc843625bbcb8b3f818179c10ca952c6459b7e74d654817ccd7845a53efdd5
s390x dotnet-templates-9.0-9.0.104-1.el8_10.s390x.rpm 638496805d17abcb275a2fce292d26c00a92803951a43ee34dfb005d4a0e811b
s390x dotnet-hostfxr-9.0-9.0.3-1.el8_10.s390x.rpm 6472fa8b7181ec40ff414f4f453c384f5bd58979502d204639c8e6550e286bb3
s390x dotnet-9.0.104-1.el8_10.s390x.rpm 7f54d7aa50162cb783b2f717f5b1e8e7b7c0c7ab38e1134409178dd21fa5dab9
s390x dotnet-sdk-dbg-9.0-9.0.104-1.el8_10.s390x.rpm 868ee0d411afe20101aec430945ce6a9dfadfd9172d81b94a926ee9f624ada3d
s390x dotnet-apphost-pack-9.0-9.0.3-1.el8_10.s390x.rpm 8a34abc0dadd672f8129b4528367ce71bd9fecd5f122d7fbcaf174bbf262522e
s390x dotnet-targeting-pack-9.0-9.0.3-1.el8_10.s390x.rpm a8330b8b062bc641acad310e53b0d923b899bac9e387b540ab20ece430e2a457
s390x aspnetcore-runtime-9.0-9.0.3-1.el8_10.s390x.rpm b157c56d8db18514d1e9d9f890a76ef12caa100d2589690b4f8a631bc5aced62
s390x dotnet-sdk-9.0-9.0.104-1.el8_10.s390x.rpm b3703c59ddd7634ad7b5103518f8df1d3b3e21a08111e5fa87efd638d67fa109
s390x dotnet-runtime-dbg-9.0-9.0.3-1.el8_10.s390x.rpm cc558deef223d1a11d7318fa0d893602ca9c5adf9895259cff1b37cd1d2eb05a
s390x dotnet-runtime-9.0-9.0.3-1.el8_10.s390x.rpm dd6a1d59c25d04aaf503e4667db46fb3fd5843619688dd578c79bbb9f058cc67
x86_64 dotnet-hostfxr-9.0-9.0.3-1.el8_10.x86_64.rpm 12dbc274d1d0a05c0496077f9e377f6b82ba4a7198eec6aa5d1b55a829c9d664
x86_64 dotnet-apphost-pack-9.0-9.0.3-1.el8_10.x86_64.rpm 37ef63e497f18f83fd4f33e9b5efe7ee1e953cb76b83cd9b4d1d90b22e2375fa
x86_64 dotnet-runtime-dbg-9.0-9.0.3-1.el8_10.x86_64.rpm 3d0d50d0c181db79a4d7d1363780cc872724f861492807e90d5de8a580c78ec8
x86_64 dotnet-9.0.104-1.el8_10.x86_64.rpm 447384ee5687cad02fe2c0de9cf5d116550198689af120cb9ee275bd13bdb9ad
x86_64 netstandard-targeting-pack-2.1-9.0.104-1.el8_10.x86_64.rpm 49671228e78df132cc4cbbdd94e41e850e42699d30c502e9445307ea31e2de59
x86_64 aspnetcore-targeting-pack-9.0-9.0.3-1.el8_10.x86_64.rpm 52d403c77090eca8bf9c1f63c04d31dc3db89d9a8b355293bc0e069e0bd922c0
x86_64 dotnet-sdk-dbg-9.0-9.0.104-1.el8_10.x86_64.rpm 53f04c7ccd1a0fe08f8314d619de17906ff569858989e785a37d517ec69a339e
x86_64 dotnet-runtime-9.0-9.0.3-1.el8_10.x86_64.rpm 6ceafb76824112e6723687498f3fe7f1e11e8d36eedf674dab31aab28453ace3
x86_64 dotnet-sdk-aot-9.0-9.0.104-1.el8_10.x86_64.rpm 8cb8fdda24e931fab7853598a214953fc9e4f981db1a42ace6e86349113fc869
x86_64 dotnet-targeting-pack-9.0-9.0.3-1.el8_10.x86_64.rpm 8e1b223e2fb5a2ed8657888fcd3b4990452b2689e41760d76b6c18ced410a36a
x86_64 dotnet-templates-9.0-9.0.104-1.el8_10.x86_64.rpm 8e268b27ff8de86e9d45ce20a9c43615ae0f85bcdfece03ec0bdd3dfcdec32f0
x86_64 aspnetcore-runtime-dbg-9.0-9.0.3-1.el8_10.x86_64.rpm b1c22b2e2e4bd054f92d579b8d8f314f682cdf6ee73be9844a202c1c9d0fabee
x86_64 aspnetcore-runtime-9.0-9.0.3-1.el8_10.x86_64.rpm dd7f3f5363b01f7c26aaa9f6f45c4772fa5df7bce7f133546610ea31da8ec101
x86_64 dotnet-sdk-9.0-9.0.104-1.el8_10.x86_64.rpm debd1e104fc6da4dfbfb27d38d9c18f66627c29ba3bb7e6191aaeb95ca10689c
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el8_10.x86_64.rpm e2b99764889143ab1f65dc14c702bacba151d84a7a2204bde9775f48a5265232
x86_64 dotnet-host-9.0.3-1.el8_10.x86_64.rpm f46939f3d1d3205d19061eeb505deee5fb5b9ca1ab5996c7d0bb0a577052e32c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.