[ALSA-2025:2670] Important: .NET 8.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2025-03-17
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-apphost-pack-8.0-8.0.14-1.el8_10.aarch64.rpm 0dabb255c3b0f35022ac6abdcb5177453fa227a4c4c77cca832d7b7c081e95cf
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el8_10.aarch64.rpm 0ec6eb35201fda357ba487ecf609ee35ee5c8589c2dadb958edba5037e27c882
aarch64 dotnet-runtime-8.0-8.0.14-1.el8_10.aarch64.rpm 389a62af0c742d010fd144ea04174d56d565be2e89ceb27f975901cb09ca2724
aarch64 dotnet-sdk-dbg-8.0-8.0.114-1.el8_10.aarch64.rpm 3caef3d6ee934c6cb8dc0f12bee312382ecb192bea99a8ffdda9adbe04f709c2
aarch64 dotnet-runtime-dbg-8.0-8.0.14-1.el8_10.aarch64.rpm 45c2096338491b60bc79a8659370725df2bb3444a7917f957b2139574c895c77
aarch64 aspnetcore-runtime-dbg-8.0-8.0.14-1.el8_10.aarch64.rpm 53df5fca692c5793ea664cb522012e51074654a3751b46043adcc241f06adcc8
aarch64 dotnet-sdk-8.0-8.0.114-1.el8_10.aarch64.rpm 6b824d27df395a3196ddcce2e3ce2fefd2c4780067f0ee5522315097be9f061e
aarch64 aspnetcore-targeting-pack-8.0-8.0.14-1.el8_10.aarch64.rpm ab41a0e53effe67372fe213764e97cd6b4fe1197913f2c0a1c9903de27f9f9cf
aarch64 aspnetcore-runtime-8.0-8.0.14-1.el8_10.aarch64.rpm cd96055ba7beb2339fa5a6ba7285c67ec8ec6da35c7c2511dfba2ac77fb3a7b7
aarch64 dotnet-hostfxr-8.0-8.0.14-1.el8_10.aarch64.rpm e894c997179c030e6ab83801426b18ae61b47d53b94e1054beca502f9d110c38
aarch64 dotnet-templates-8.0-8.0.114-1.el8_10.aarch64.rpm eb2bbf22256f917a9c05df61dfcfdf7f8e8c71a36ae317531fdc22f3663d38e5
aarch64 dotnet-targeting-pack-8.0-8.0.14-1.el8_10.aarch64.rpm fb9f5cb3d277444d769dece6cb583659251b917ee9ad5deb309dfaefe09ae3c5
ppc64le dotnet-apphost-pack-8.0-8.0.14-1.el8_10.ppc64le.rpm 1a8f56bbf0333557100f6000de75181c5c6e6eac4273fa414725f8ab711e9745
ppc64le dotnet-hostfxr-8.0-8.0.14-1.el8_10.ppc64le.rpm 22f7b7af440cb246fd6e27d6b6c42e4e2389ec9b0a6de4865fd1ee004c3d1dc4
ppc64le dotnet-runtime-8.0-8.0.14-1.el8_10.ppc64le.rpm 2f630eb4bb85e4fd5f86f680c1ffea8f4579b0a4f8274326113d692046f5b6aa
ppc64le dotnet-templates-8.0-8.0.114-1.el8_10.ppc64le.rpm 356625c02ffb1eca6a7eaff0164bed68eb6d2a08658d9e26b02857713878cbe0
ppc64le dotnet-sdk-8.0-8.0.114-1.el8_10.ppc64le.rpm 592af3282fb07d5df0f18a5f4a071bcba04dcc8f3477576cedbd342117293362
ppc64le dotnet-targeting-pack-8.0-8.0.14-1.el8_10.ppc64le.rpm 5c30b8518af3d884ddc2d4b886b48aa86cf5b243075bfdc99d37bd7cc5530108
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el8_10.ppc64le.rpm 69e0a8334fbf8f458a49af430cb520f14ba97e894a7c0a8f484f395eea9fe629
ppc64le aspnetcore-targeting-pack-8.0-8.0.14-1.el8_10.ppc64le.rpm 6ba2d849033e6125194b513676cd55ec7206654af99d8c7f9ee26e502075f018
ppc64le dotnet-sdk-dbg-8.0-8.0.114-1.el8_10.ppc64le.rpm cee298fbf21f57fde5953c9694a3f1d569c959717e40bc10ce62058ed3ade9af
ppc64le aspnetcore-runtime-dbg-8.0-8.0.14-1.el8_10.ppc64le.rpm e55f9fb2ec981f3ecbc7d416047415736194af64ca3e3899fee68049a442f0fd
ppc64le dotnet-runtime-dbg-8.0-8.0.14-1.el8_10.ppc64le.rpm e5ae9e0fb4f1fa63e2a53e2e5040cdb0f882451937ae8848bf086cacf95b2623
ppc64le aspnetcore-runtime-8.0-8.0.14-1.el8_10.ppc64le.rpm e6123f2b4e8b3e5271b54f006bc3a7d1944d10de2df6008b2199f9d38e29e3f0
s390x dotnet-runtime-dbg-8.0-8.0.14-1.el8_10.s390x.rpm 08e3e0cc33d04fa742cd7f86d95c5f5cd0c173b4289251a56d8428653f425bde
s390x dotnet-targeting-pack-8.0-8.0.14-1.el8_10.s390x.rpm 3c15bdebf835a3b478a10377a4100efd5b4b84c3c628b6d32ffc116d9aea50e2
s390x aspnetcore-runtime-8.0-8.0.14-1.el8_10.s390x.rpm 3f980b033e53f42ba353761ccca67998a619b2c8ef24f244e7fdcfb6797d1956
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el8_10.s390x.rpm 61ad83ff751911ef9c6c6154d6f5390a8f964bf12f832e7ae2bb90753d055b9e
s390x dotnet-runtime-8.0-8.0.14-1.el8_10.s390x.rpm 6ed7b3d9b5b97f49228a00450b3a6def76806a3c21aed39a8a4160e9f4bf96b3
s390x dotnet-sdk-8.0-8.0.114-1.el8_10.s390x.rpm 78845ef2ff7ec040d60f3f527aae2809e3027bbc1aa9d809ea989e3878dcfd35
s390x dotnet-sdk-dbg-8.0-8.0.114-1.el8_10.s390x.rpm 83b7fbf2a5edf15fb886a5c3e2b1f171311a5ec0eaa2fa7c00338bb082a3e16c
s390x aspnetcore-runtime-dbg-8.0-8.0.14-1.el8_10.s390x.rpm 9ea184224811338ea7a52e097c30c94ae48679f3a716c319421f08dc924e4b35
s390x dotnet-templates-8.0-8.0.114-1.el8_10.s390x.rpm b1a84530a13ea65a87aabd7779bb83388d96f37865cd69fc61d96c5d00f4fcab
s390x dotnet-apphost-pack-8.0-8.0.14-1.el8_10.s390x.rpm b81111ed1d23fe09193321df901c1f2682d4a4bf6c0904fac75d5d1e8b75971d
s390x dotnet-hostfxr-8.0-8.0.14-1.el8_10.s390x.rpm f9bec2d54ee0a1e526fed3caaf036710b647def7e66b7d23b01be7acb877b63b
s390x aspnetcore-targeting-pack-8.0-8.0.14-1.el8_10.s390x.rpm fc815bb8c68fd0eead53556bfc18732e7cd71d56b9b0082b4833082e5b995fc5
x86_64 dotnet-templates-8.0-8.0.114-1.el8_10.x86_64.rpm 33131c904331a1ac45fe0736a17eccbef9ec212397d53a3b30929ed25167f362
x86_64 dotnet-runtime-dbg-8.0-8.0.14-1.el8_10.x86_64.rpm 5077a3399f8dbd3200f8da6e1b82ed758b56907c6e0fa6f23ceb99a2200e9569
x86_64 dotnet-runtime-8.0-8.0.14-1.el8_10.x86_64.rpm 5bdb83dce84fd0c3a3f7f1a281cb34275b5ba2f7434dfc2479e667ab1314a9c8
x86_64 aspnetcore-targeting-pack-8.0-8.0.14-1.el8_10.x86_64.rpm 89818bf44f9a284d7672bd36a866b7bfbe4a3d289fab26ddbc12a65aca9e8991
x86_64 aspnetcore-runtime-dbg-8.0-8.0.14-1.el8_10.x86_64.rpm 9d4535c7bef0992780c09b75cd5f64acf519dcc3d09708808614803cf0faa90c
x86_64 aspnetcore-runtime-8.0-8.0.14-1.el8_10.x86_64.rpm a1c9747f674dca79d965145271460f69517ba34b169405025476c62d25c9a190
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el8_10.x86_64.rpm b0568d850995914f0e730cac72d0609d40c85a3e8fc5cc71c0de576e05d94328
x86_64 dotnet-hostfxr-8.0-8.0.14-1.el8_10.x86_64.rpm dd049c026e4e29a7c0a7d907955bcf55f1647ed6c4f439e039213930b5a3fd19
x86_64 dotnet-sdk-8.0-8.0.114-1.el8_10.x86_64.rpm ddbc047a8ed55395c44b5002d67489b0cb9a5d31fa3bdf49e13e3b12449e6f9f
x86_64 dotnet-apphost-pack-8.0-8.0.14-1.el8_10.x86_64.rpm ddf46a86b1bde7aaf2773c3603f84269cf6918fbe7a8fc32565073e93e1f02ab
x86_64 dotnet-targeting-pack-8.0-8.0.14-1.el8_10.x86_64.rpm ed60e75dfa36bd0c44273a96d03d78106320c469fe5fce7b3f17844daac478fb
x86_64 dotnet-sdk-dbg-8.0-8.0.114-1.el8_10.x86_64.rpm f9462a7d1c9b1d542f3ec7a0a9d380073b1fbae723d6bde1d4bba80ec34682d4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.