[ALSA-2025:2668] Important: .NET 9.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2025-03-17
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-dbg-9.0-9.0.3-1.el9_5.aarch64.rpm 01d1977e7341292d05075e8d545e71b000a2539344bf19dfa03ab18fe20ccb7b
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el9_5.aarch64.rpm 0bf89b7612bbf3e7b3169c99bf66a04547ad4ab41a33b279a737bee0905ce642
aarch64 netstandard-targeting-pack-2.1-9.0.104-1.el9_5.aarch64.rpm 1239b032adcbe8a1548e2a55d6d9ff7aa183e124e3feee5f70d535c7a47ef191
aarch64 dotnet-host-9.0.3-1.el9_5.aarch64.rpm 2269c405c67f44bd203716cd2839a35961b5ca9f4c977c98577b559c82f1bc1e
aarch64 dotnet-targeting-pack-9.0-9.0.3-1.el9_5.aarch64.rpm 59b2700b8e5993a3ae708e4db80d3c586d6dc9c050ef11eba01de280a23ca181
aarch64 aspnetcore-targeting-pack-9.0-9.0.3-1.el9_5.aarch64.rpm 6a08a6b81fb20a935cd1758a89fcc6317174441bd04dc87cb640000d7c963d6e
aarch64 dotnet-hostfxr-9.0-9.0.3-1.el9_5.aarch64.rpm 744013229f2383994e15c79c2cf2e4b0305783e8caae94eaa342e89f30ff81b7
aarch64 dotnet-sdk-dbg-9.0-9.0.104-1.el9_5.aarch64.rpm 821eacb490e7d36ef8c9db56a1a6f805b521443640e27ca9d834f1ce3ae6490f
aarch64 dotnet-sdk-9.0-9.0.104-1.el9_5.aarch64.rpm 9646f875630e4e912181dfb226794856186f0b4bb295087d3b3c6f96f6520143
aarch64 dotnet-apphost-pack-9.0-9.0.3-1.el9_5.aarch64.rpm c059875b565d9e48b865343430df921df05b4f4e43c756afc997c0618889d0e6
aarch64 dotnet-runtime-9.0-9.0.3-1.el9_5.aarch64.rpm c0f3d748a377047d4c9ed0ed96190c6e5117c4d194c3c6fa53cebd5e43198194
aarch64 dotnet-templates-9.0-9.0.104-1.el9_5.aarch64.rpm cb6b03ce0f4d7f52e36261caa3bff277066c5ab431fdeecee55b331bfd2c6c13
aarch64 dotnet-sdk-aot-9.0-9.0.104-1.el9_5.aarch64.rpm d43156837da008085e35b113e966ea525aaa4e25d2cd0902854c7576df35af42
aarch64 aspnetcore-runtime-dbg-9.0-9.0.3-1.el9_5.aarch64.rpm ecc5ae6ecf505e85670c461c7a4c45d7040de7ad64f4700684f90adc7fd53b83
aarch64 aspnetcore-runtime-9.0-9.0.3-1.el9_5.aarch64.rpm fc5fe61be4b26412e7cd9fe6cb113ac6da76326d7c7da29f33cc7abe4896c601
ppc64le dotnet-sdk-9.0-9.0.104-1.el9_5.ppc64le.rpm 022af1498ee42f7a18c45c1cc3bf38c82234a17523eb8f061fc390ef74388b9f
ppc64le netstandard-targeting-pack-2.1-9.0.104-1.el9_5.ppc64le.rpm 08c2d9fe0e613acfcc4cc2b000b68d6f6afc65e4b8fb02d91d0485657635ea05
ppc64le dotnet-sdk-dbg-9.0-9.0.104-1.el9_5.ppc64le.rpm 1033da242cd7c1ae67872ab703bdfff3ca91044633f4a7f9b1d67591b5be3051
ppc64le dotnet-hostfxr-9.0-9.0.3-1.el9_5.ppc64le.rpm 1195fd91674e41749266e8d546ba1e115eb8523fed9a2b66b6935561891e744b
ppc64le dotnet-runtime-dbg-9.0-9.0.3-1.el9_5.ppc64le.rpm 177b5e59f4c69bbf699abad36e5755003a23e160291f625ab44d9a972173ddf6
ppc64le dotnet-runtime-9.0-9.0.3-1.el9_5.ppc64le.rpm 31a5538c9e6db4b730d2bfcf841a285aba0c705b20cfd306c6d4fc39d9cc5183
ppc64le aspnetcore-targeting-pack-9.0-9.0.3-1.el9_5.ppc64le.rpm 39700031f6394f9e0fc3a647d0633e74eec99bb5fdd2ca545c09f9bfd3ce262a
ppc64le dotnet-host-9.0.3-1.el9_5.ppc64le.rpm 569bd80995b6c1127691a2d3b9f14be7628b7dfc82a47dc822403ee4df586af0
ppc64le dotnet-templates-9.0-9.0.104-1.el9_5.ppc64le.rpm 59c92ce9eacb24cbe6e07aa7298288db4ebd598c50e43a1ed0ff5d3248d38ca5
ppc64le aspnetcore-runtime-dbg-9.0-9.0.3-1.el9_5.ppc64le.rpm 5ec0248b232d2995156472947a5ed394c12723523f4c301d667ef32a2dd67365
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el9_5.ppc64le.rpm 9c0fedc675e7ab5303dbdf538ee9162e172f526e733afb0ba2815362c8282805
ppc64le dotnet-apphost-pack-9.0-9.0.3-1.el9_5.ppc64le.rpm a665ba1e2b2a684239dabee8249815041785fa7a8e8291c4a18101dfd5f4dcd3
ppc64le dotnet-targeting-pack-9.0-9.0.3-1.el9_5.ppc64le.rpm d34a55a89f1ff1652a1e77a3bdf6dbc59b3b6575c33ddf1507856f08c19a179b
ppc64le aspnetcore-runtime-9.0-9.0.3-1.el9_5.ppc64le.rpm f84d4be908e9cfae9f0a5546f52da304b4c03fc57c8b7fff07d41c8f336a2854
s390x dotnet-apphost-pack-9.0-9.0.3-1.el9_5.s390x.rpm 13c50a42faeb348bfd11bfaf435843443098fb9babcdd3bcf6fff0cb1bf0a346
s390x dotnet-targeting-pack-9.0-9.0.3-1.el9_5.s390x.rpm 44020a5dd72308512bfbf0d346df6664c887a7eaf9bf38611caf7916e8847d49
s390x netstandard-targeting-pack-2.1-9.0.104-1.el9_5.s390x.rpm 57d6fb527a67bd78727d3d22720008bc688ac56f9498ab9b9c96f62561eaf824
s390x dotnet-runtime-9.0-9.0.3-1.el9_5.s390x.rpm 659b51ad9a54204b342348f117ac256e8d76c223a7b893548fbd9bc0530833bc
s390x aspnetcore-runtime-dbg-9.0-9.0.3-1.el9_5.s390x.rpm 861eb4eb68f2a04d91aaf94740c0a4b19a5f4235f3beec27de0a9b7274c09bd0
s390x aspnetcore-runtime-9.0-9.0.3-1.el9_5.s390x.rpm 8de208938808113763db6e8a3f0f11061ef7b29a8c6d08bddb1ed4fe31e86d29
s390x dotnet-sdk-dbg-9.0-9.0.104-1.el9_5.s390x.rpm 91a0a89ff6d65b3b3ca9778bd66b37ed0dfb35def554c7840a1e0d0254090c29
s390x dotnet-hostfxr-9.0-9.0.3-1.el9_5.s390x.rpm 9bc8439ae041c7d7a3d8c0e7762b78ad66c1c61796cfc5ad1b364371ee2dffc8
s390x dotnet-runtime-dbg-9.0-9.0.3-1.el9_5.s390x.rpm ac789c43903655ee0276e11c0a71843c32fc573b408f3213a8bfcfda4e82fd9a
s390x dotnet-host-9.0.3-1.el9_5.s390x.rpm acdb8de0dedc222219fc6318ac600237987d3f53638a102e830135931f24b32a
s390x aspnetcore-targeting-pack-9.0-9.0.3-1.el9_5.s390x.rpm b571f9b9c0a7246e97bf3a4d4d8380bd5a4749b4ed4618d59de0fa33759cc8b1
s390x dotnet-sdk-9.0-9.0.104-1.el9_5.s390x.rpm bac29f1214c70cae1daa6ff72bdc94b19f16d7d6a114fbc90b7d433b72950c5e
s390x dotnet-templates-9.0-9.0.104-1.el9_5.s390x.rpm cd5db8b9f6fe0c78ce2bcc348962ec0504e7b942d1533815c6bb5dacd52bc764
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el9_5.s390x.rpm e39304bd808acb082714424e3b59a72d7eb55388def0c7bb543bb9fd74f3ef9a
x86_64 dotnet-runtime-9.0-9.0.3-1.el9_5.x86_64.rpm 047814a7c2782bf3d343e3b36aea4c5cbb09101cdc5860147a510552eac8b3af
x86_64 dotnet-apphost-pack-9.0-9.0.3-1.el9_5.x86_64.rpm 087eeb83d9c964042e0fe7af07b491160a9d1f3edfeee3b7282d7cbb1b0c8929
x86_64 aspnetcore-targeting-pack-9.0-9.0.3-1.el9_5.x86_64.rpm 1f9e6e1827598133914adfd5148f08709548597bac47958535e14e80ab4f3041
x86_64 dotnet-sdk-dbg-9.0-9.0.104-1.el9_5.x86_64.rpm 30912efdab6efed13ab632042e8f7872529fe269b7e9bbe378ef0d793224c1bf
x86_64 aspnetcore-runtime-dbg-9.0-9.0.3-1.el9_5.x86_64.rpm 34bce82bbf9fe6266f670f5f51dafaa6bc8125c5d91910374ca4d366cc6fb3fa
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el9_5.x86_64.rpm 39aef344095bc024e1479e1b230536eee4576bc69007212d01de7c2edf699112
x86_64 dotnet-sdk-aot-9.0-9.0.104-1.el9_5.x86_64.rpm 45b823ba0a12973a207a0ec6a9a3e162f4957fca72662893f1ab325803ad822c
x86_64 aspnetcore-runtime-9.0-9.0.3-1.el9_5.x86_64.rpm 5cef1995570af39501c6a3a21e538e91a9484eee3776410bace84814a7af7fe7
x86_64 dotnet-runtime-dbg-9.0-9.0.3-1.el9_5.x86_64.rpm 6a14249df360de5a3559a21987243fa4bd2be2b32b470d0d33635dbcfeb41884
x86_64 netstandard-targeting-pack-2.1-9.0.104-1.el9_5.x86_64.rpm 6ba4282d847b44d3db8d94bbdb3bffdbb57bb517aa9fe716729a17fcbbcce6be
x86_64 dotnet-host-9.0.3-1.el9_5.x86_64.rpm 763ab5973d266b8683eaa671c929b73930bb383275d95d9ff6b43023648360bc
x86_64 dotnet-sdk-9.0-9.0.104-1.el9_5.x86_64.rpm 7868fd4cee3fc1416dc23f625d38758e5f9d24d796f43acbad99869719ffdb6f
x86_64 dotnet-templates-9.0-9.0.104-1.el9_5.x86_64.rpm 8837991b4cf521f7dbe752714e0cf7b7ef2c7ff0cc27efc3309248469773f36b
x86_64 dotnet-hostfxr-9.0-9.0.3-1.el9_5.x86_64.rpm 8f746441db85c53c040ef6f48b1e1710132a855eeecc1e5e50c336eab1495f26
x86_64 dotnet-targeting-pack-9.0-9.0.3-1.el9_5.x86_64.rpm c1bb394c038f7c13483b10661f86dfe9005a5a9be6fa426204f110d5ad3b121b
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.