[ALSA-2024:9543] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2024-11-19
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.100 and .NET Runtime 9.0.1.0. Security Fix(es): * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498) * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es): * dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component (CVE-2024-43498) * dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component (CVE-2024-43499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-9.0-9.0.0-1.el9_5.aarch64.rpm 25c4b7e16fe80eb6ad713e8320b8b367ed24b83874ae49131be26d022782b6d8
aarch64 netstandard-targeting-pack-2.1-9.0.100-1.el9_5.aarch64.rpm 2c1b7ea94a49015075dcd152abea2ff4a6d3be928416429e504b16aa273337ca
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.100-1.el9_5.aarch64.rpm 42d41121cf337183f41264316ece74388f54d3c721ef7703f7feaf31dda43b3d
aarch64 aspnetcore-runtime-dbg-9.0-9.0.0-1.el9_5.aarch64.rpm 4e338fe6fbe2381858b0d1895b6f8407c8852a65199d1b6d9cdad36aa13002ef
aarch64 dotnet-templates-9.0-9.0.100-1.el9_5.aarch64.rpm 53908b58e582953534d7735637283ac44b825f5730c5a9657dfd65550e90ac3a
aarch64 aspnetcore-runtime-9.0-9.0.0-1.el9_5.aarch64.rpm 5a0d64a1880ddbf16a1b755944bdd8dd66fcc82c57b451ce4481c37a72d888bf
aarch64 dotnet-host-9.0.0-1.el9_5.aarch64.rpm 5c108c19647094673b7cdb12edd064c5976cb04d17f66e5ea430abebde4663e3
aarch64 aspnetcore-targeting-pack-9.0-9.0.0-1.el9_5.aarch64.rpm 61b1e92deebd1729b027ec8711f22681f4301f72bf62539d9f8f9c6c1fed15b3
aarch64 dotnet-apphost-pack-9.0-9.0.0-1.el9_5.aarch64.rpm 72529ddcc9af3d9ac5c3a8b1f168f2bfffbc817344b6fc0c99ca6bbbd8321ffb
aarch64 dotnet-targeting-pack-9.0-9.0.0-1.el9_5.aarch64.rpm a536d20f37391004411c8afa6c9bc8018f6631b3b0be0450823740e7016ea818
aarch64 dotnet-sdk-aot-9.0-9.0.100-1.el9_5.aarch64.rpm aa77c6c244981e2fb2f1de195104eab490d22bce3f8390c2db7a2f14d1c74c0b
aarch64 dotnet-sdk-dbg-9.0-9.0.100-1.el9_5.aarch64.rpm bd6f6678837a3fc33f2e18107b66babbf9152f379df1c8deb7d78dfe01fe500f
aarch64 dotnet-hostfxr-9.0-9.0.0-1.el9_5.aarch64.rpm d206e86238596b196666b854d395235c33b0260056d14ce640a79a7a3554aec0
aarch64 dotnet-runtime-dbg-9.0-9.0.0-1.el9_5.aarch64.rpm dd3471866ce7b313cbb8941b6a9c647836d948ea0c4d43b106fb7f29256ad07f
aarch64 dotnet-sdk-9.0-9.0.100-1.el9_5.aarch64.rpm e1903a5821745fb982f3457f3883e9b8b3b988df666d09bf85c7224f8339238f
ppc64le dotnet-sdk-9.0-9.0.100-1.el9_5.ppc64le.rpm 0d6e97aea8aefc1a35df2971592fa568026ce353a361f74f813d29b853819ae1
ppc64le dotnet-hostfxr-9.0-9.0.0-1.el9_5.ppc64le.rpm 2a142ff4a159dfe6913f01eb7bacdb230209595247ee82545a458845c6bacc8d
ppc64le dotnet-runtime-dbg-9.0-9.0.0-1.el9_5.ppc64le.rpm 3ada1cdfb0d56a3ceb4b0b24e140cde922f5f61759803240d628b8f2a60b25b4
ppc64le aspnetcore-runtime-dbg-9.0-9.0.0-1.el9_5.ppc64le.rpm 443e9e78c3f8ea2c56d47632ab3096e3c4c9a3ef7e71e76635576bf0b90d0ba9
ppc64le aspnetcore-runtime-9.0-9.0.0-1.el9_5.ppc64le.rpm 7680de5fef82bc1e5ca12fe0912257df606aacf561396e969e3a47fc93528419
ppc64le dotnet-targeting-pack-9.0-9.0.0-1.el9_5.ppc64le.rpm 7f615398acb5f05770ada93ec07a4886068591951eaedbf7bd134eb120ea73b5
ppc64le dotnet-runtime-9.0-9.0.0-1.el9_5.ppc64le.rpm 8d54864adb9f5eaaf7f8d01bb040a1df343c0d07e173768743fa01ebbd903fe5
ppc64le dotnet-apphost-pack-9.0-9.0.0-1.el9_5.ppc64le.rpm a5830b1b8dc4c9d1fe5dd3142005b0d23c5a698149691ee8f4fbd97ddeccd62c
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.100-1.el9_5.ppc64le.rpm aa426741eeb39351b17ff059684384353f45c926fa7f0c71e49127bb19d772c9
ppc64le dotnet-host-9.0.0-1.el9_5.ppc64le.rpm aa51bfcffa373e30eb5db6e273de22664f3648fbe718603dd988e01374ff5b49
ppc64le dotnet-templates-9.0-9.0.100-1.el9_5.ppc64le.rpm bb257687f8ce3ae108e16dcb114a1a4a6e01043fcdc759d28561d672aeff430a
ppc64le aspnetcore-targeting-pack-9.0-9.0.0-1.el9_5.ppc64le.rpm d0e1bb65b870039f71b40d2d278a723e86b3e5282b48cdaf857c7865bbd8f2d5
ppc64le dotnet-sdk-dbg-9.0-9.0.100-1.el9_5.ppc64le.rpm d85dd5f88c149a76240c09c5a7dd385cc21c69bfecf85e545cd6663aef6874a5
ppc64le netstandard-targeting-pack-2.1-9.0.100-1.el9_5.ppc64le.rpm eeb55ddcc16d87531d0e485c40670df6567e7373473bdb83c102a264f52fec23
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.100-1.el9_5.s390x.rpm 06ec1afb3477f8a1160fd74681f449c4f18dc6120d45ef79a9adab495a410dee
s390x netstandard-targeting-pack-2.1-9.0.100-1.el9_5.s390x.rpm 2967c05cd10c15cbf7299f885729656d7f72659fba6616ad39295e798178f8fd
s390x dotnet-hostfxr-9.0-9.0.0-1.el9_5.s390x.rpm 344077b2b88959b47334ba2b902be92e0c1eb057b23956e489d0fa3f5b8a5398
s390x dotnet-runtime-dbg-9.0-9.0.0-1.el9_5.s390x.rpm 4e3396ffb0744c3c8caebf4f88c4d2215da035913fb10c9a5b4f9c8dfe4af91d
s390x aspnetcore-runtime-dbg-9.0-9.0.0-1.el9_5.s390x.rpm 76f326e6e1fe75f834cb427f93edf74220dda4ab90066169e3a9fa68230270c3
s390x dotnet-apphost-pack-9.0-9.0.0-1.el9_5.s390x.rpm 774647fb41488babe6aff4509dc15e7f5c1d94668ca2241981251a69a618900d
s390x dotnet-sdk-9.0-9.0.100-1.el9_5.s390x.rpm 78fac27ab94ffebd7516bf4856d8e8c8abeeaf5283ee2481f1ca0e9033438c2f
s390x aspnetcore-runtime-9.0-9.0.0-1.el9_5.s390x.rpm 863aae91663eed0d18880c094b6d52d0f9a872b3c12ef69548ff0ad598155f7e
s390x dotnet-templates-9.0-9.0.100-1.el9_5.s390x.rpm 89683c28190e3c8e366d6ca5a9963987e657653daccb211da8d73633ba131eb1
s390x aspnetcore-targeting-pack-9.0-9.0.0-1.el9_5.s390x.rpm 8f785b1c18d61de82c80054042fd4a70aae1038ed709719734321b185ab62c8b
s390x dotnet-host-9.0.0-1.el9_5.s390x.rpm b5d1ab12902d0e6e1529fe5e741a98cd52cdd8b98b6cc93444817d3bc4ed1e26
s390x dotnet-runtime-9.0-9.0.0-1.el9_5.s390x.rpm c6276ba2e474a33d079434e21fbf4315ec860d9d1a25410a70666847a6fd0402
s390x dotnet-targeting-pack-9.0-9.0.0-1.el9_5.s390x.rpm cf280410ef86cf61dbd28c489e5e98b7926551c6c85c7ed6cf8aa9e51c058808
s390x dotnet-sdk-dbg-9.0-9.0.100-1.el9_5.s390x.rpm fcb52ec66f1d1c86b7c5a1f5d055492f1224736aa235fc33b21407dccef731bc
x86_64 dotnet-targeting-pack-9.0-9.0.0-1.el9_5.x86_64.rpm 123b739790867a9bc79482bfbe40003770179faf45eeb944afe93a1d54be7ffc
x86_64 dotnet-host-9.0.0-1.el9_5.x86_64.rpm 1a1e24063015564395f3a40d99cbecfba08a389f70bd0c5dc5e36d7ea85c0eab
x86_64 aspnetcore-targeting-pack-9.0-9.0.0-1.el9_5.x86_64.rpm 1ce21afefa28bba967534adb4a0852244affe59aa256c5de7f60972d8cffdf7d
x86_64 netstandard-targeting-pack-2.1-9.0.100-1.el9_5.x86_64.rpm 22985cb059eb281001b5e1d35a124859a0c45fea09fab5d23597d1e4790ff5ab
x86_64 dotnet-runtime-9.0-9.0.0-1.el9_5.x86_64.rpm 2376384329eb6456d9b6f7f2a03556c42433a13771909a9508545a29a76507ae
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.100-1.el9_5.x86_64.rpm 4d2550d7e44fd44a06a568cab86e48ae8d44be5e1f7cdf09bb99b508c8fd74db
x86_64 dotnet-sdk-aot-9.0-9.0.100-1.el9_5.x86_64.rpm 5d9e838e41f080f1c5f868823fbc4122b1e2c31da6e34daee32ed8e38894529c
x86_64 dotnet-templates-9.0-9.0.100-1.el9_5.x86_64.rpm 6bfa970913ac3d70d766f5cf8cb2404e1030aa5871eb7ec21adde940ca7b014c
x86_64 dotnet-hostfxr-9.0-9.0.0-1.el9_5.x86_64.rpm 93d7bee375fbc27d24626bb032efe479c70d9c2edb4b07c8975635e2132f17bd
x86_64 dotnet-sdk-dbg-9.0-9.0.100-1.el9_5.x86_64.rpm a90066e0069887912e475f33c36f6cac98f9be8bf19fceed6db9509a87ea38d1
x86_64 dotnet-apphost-pack-9.0-9.0.0-1.el9_5.x86_64.rpm b6fa296f7f6ca24e53f7fcf283d1166c540b98e63597d298fce8861d7e24350d
x86_64 aspnetcore-runtime-dbg-9.0-9.0.0-1.el9_5.x86_64.rpm b9edf47b22c11b8aadc2d0243ff6d4af85b769116afb8e4e56ab338ff7380464
x86_64 aspnetcore-runtime-9.0-9.0.0-1.el9_5.x86_64.rpm cddf5a08ae4e210ff136597b63150a8da212a620eae3fa8f9077959b4ee60bcc
x86_64 dotnet-sdk-9.0-9.0.100-1.el9_5.x86_64.rpm f962808700970caca5a0f9c5c83f5346053c57d711cfbf426e8b2e02ca045c2b
x86_64 dotnet-runtime-dbg-9.0-9.0.0-1.el9_5.x86_64.rpm fa5512c0819b934761423a5eea445764b92b97af57d5127e867d5c90dd4664e0
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.