[ALSA-2025:2669] Important: .NET 8.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2025-03-17
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070) Bug Fix(es) and Enhancement(s): * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el9_5.aarch64.rpm 34341f8c8713ddf0f40975ed210099e865a943a8266cc3e176ef73cd94a2333e
aarch64 dotnet-targeting-pack-8.0-8.0.14-1.el9_5.aarch64.rpm 40a196947dbdc6830d4a51d7f0ccddcd45d5fc7fba8f35945409c4b08fd0ae4a
aarch64 aspnetcore-runtime-8.0-8.0.14-1.el9_5.aarch64.rpm 7b69110f48bf12c8b5efbe574d998f065a1f9f661b8391b3271ef6f21518f394
aarch64 aspnetcore-targeting-pack-8.0-8.0.14-1.el9_5.aarch64.rpm abdef3bb8efd261b917e7a1ec15ddde854b5ea12383bf9691d5844d232130e87
aarch64 dotnet-runtime-8.0-8.0.14-1.el9_5.aarch64.rpm bf9d579cbed4f28c2dd3560283c584ba1ee6702ad8970081d9569f17dc1abb9a
aarch64 dotnet-sdk-dbg-8.0-8.0.114-1.el9_5.aarch64.rpm cd53a60c2ab00e04af9c5a5259173ac696c0087bd3187040378ef959516343ac
aarch64 dotnet-runtime-dbg-8.0-8.0.14-1.el9_5.aarch64.rpm cde3ee576165896c1f083178270c7dfcab2585395aab2e7c13859523d9678693
aarch64 dotnet-hostfxr-8.0-8.0.14-1.el9_5.aarch64.rpm ce03353bc735935d0a468fc03bbc165c557657506e6a55f9b4e71848f52e5a0a
aarch64 dotnet-sdk-8.0-8.0.114-1.el9_5.aarch64.rpm d7088cb52a9d182d9e4aadde208cc28f8b7aa53ad0d01e7f781bafce270c38c5
aarch64 dotnet-templates-8.0-8.0.114-1.el9_5.aarch64.rpm de1f31d01515de13b6d6ced375e5105d9e47256b39f4a86389b8800749d5dab4
aarch64 dotnet-apphost-pack-8.0-8.0.14-1.el9_5.aarch64.rpm f2c16d917b55b3a52ab1e96bd64d9a916a074ded63147bf9d22555bb77a08fe2
aarch64 aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_5.aarch64.rpm f457c7e1326f99361b8c0761512ad9839a0b0776a14406d5bdc61a8e3f18791d
ppc64le aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_5.ppc64le.rpm 0547cfced8ab679e047f757e11cf367163f831b244edc69edc997efcdf8d0655
ppc64le dotnet-sdk-8.0-8.0.114-1.el9_5.ppc64le.rpm 1d00ff0e917d49187132bee67ad9b8dee3948e19d905c4e686f8557bf07c3d6f
ppc64le dotnet-runtime-8.0-8.0.14-1.el9_5.ppc64le.rpm 1de9f8b215fb9edf946f980b7232729b53f214cbb4e641444d3ad85134ba7654
ppc64le aspnetcore-runtime-8.0-8.0.14-1.el9_5.ppc64le.rpm 3837659e651a55323bc1972f6229198094a28adcde00b428f4349ca96d17f61a
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el9_5.ppc64le.rpm 3e23dd2d382e951f516c6752139762f36946be03fc92e8f591d36e1b9242e019
ppc64le dotnet-apphost-pack-8.0-8.0.14-1.el9_5.ppc64le.rpm 5069d322c8b1e9d1f4da38c3c31f91b2a89589f1ab479580aae5d94a62444017
ppc64le dotnet-runtime-dbg-8.0-8.0.14-1.el9_5.ppc64le.rpm 58794a3c56c8f70ab02553550faa46b422f2378680a2c8e3dca77ced6556c431
ppc64le dotnet-targeting-pack-8.0-8.0.14-1.el9_5.ppc64le.rpm 59b63d8029d343dfa89c466ab0db5d80da91108e0a7dd364732da9e5498a72c5
ppc64le dotnet-templates-8.0-8.0.114-1.el9_5.ppc64le.rpm 64977f70ee8aac9256835b62d09f2aeba26e3da32bc9973ff93070f2a56bd998
ppc64le dotnet-hostfxr-8.0-8.0.14-1.el9_5.ppc64le.rpm 662ab23059fb67057830dc98915a86f353dffce8f2e28b66c4eb872eacd5d63a
ppc64le dotnet-sdk-dbg-8.0-8.0.114-1.el9_5.ppc64le.rpm 9a693e6f403911d361ab88aac261f11b05c141c2a2d088cbda10ccff3abc52dc
ppc64le aspnetcore-targeting-pack-8.0-8.0.14-1.el9_5.ppc64le.rpm cf05e699207572d7e8dee8a28f9452f887875891252e7cda8feca08d160abec0
s390x dotnet-templates-8.0-8.0.114-1.el9_5.s390x.rpm 044da777c075205b586aa4f2d4f5d35fe9340204df2dd8869832fd9535106f39
s390x dotnet-sdk-8.0-8.0.114-1.el9_5.s390x.rpm 162727fb0d19c83bfcd5617a20137669242878a9eeb68e217d6a598fb5533dfc
s390x dotnet-hostfxr-8.0-8.0.14-1.el9_5.s390x.rpm 2eef41c43c2177b0d36a72233c89f2f5ad79bca81b6548488e0d6dfe857d7067
s390x dotnet-runtime-dbg-8.0-8.0.14-1.el9_5.s390x.rpm 2fd44c7f5b2117da3a86b7bad627d0b4fba50c8c90edf75db6776ae86b994ab0
s390x dotnet-apphost-pack-8.0-8.0.14-1.el9_5.s390x.rpm 4282adfc4112090b284bc6dfc8bd95d989d213a29674d9a51637559b5803edb6
s390x dotnet-runtime-8.0-8.0.14-1.el9_5.s390x.rpm 450e21162d124643650b5c3f5557064da4dca3eff70ce8c865ed45f92bc193ce
s390x aspnetcore-runtime-8.0-8.0.14-1.el9_5.s390x.rpm 45c4023269fb13f5b3f7a86e984346da4384ca7ffdcba656ce49d7537206d5b8
s390x dotnet-sdk-dbg-8.0-8.0.114-1.el9_5.s390x.rpm 8d48eeca79f5da4ca66ab0cb01666d2382155785a04c9ef39497c9f924f43ae9
s390x aspnetcore-targeting-pack-8.0-8.0.14-1.el9_5.s390x.rpm b343774842bcedf4a0c9b9c789eb494e4c6381880cb16c8f967e7f21f9feb561
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el9_5.s390x.rpm bec595831e9607e8772b795e73db80f3aa6700c32a95405f002e247debf21e1a
s390x dotnet-targeting-pack-8.0-8.0.14-1.el9_5.s390x.rpm ec18a88335e972a4abb5ced167318db6450ee4ad75d369978f176f5e5ea5e4cd
s390x aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_5.s390x.rpm f8b2247b942cd1c024930302977f7291bc11b14a8363e9ae219dfb02ae755b40
x86_64 dotnet-sdk-dbg-8.0-8.0.114-1.el9_5.x86_64.rpm 621bb847dc5d3e636278cc846257169b2957fbce8a09edf5e920b2359490f2bb
x86_64 dotnet-runtime-8.0-8.0.14-1.el9_5.x86_64.rpm 6b2f7a2b993aad96a20ee3ca8b63e016b9554c94b5f385bbd8b8e3b063d3657d
x86_64 aspnetcore-runtime-8.0-8.0.14-1.el9_5.x86_64.rpm 6c102ca36dae880463b6dd8a2537be674a7f6370d992eddbffc4e5c1f77ba539
x86_64 dotnet-runtime-dbg-8.0-8.0.14-1.el9_5.x86_64.rpm 7eb74cea9a5681afb26472784f641a7275d19c3256d80b8a9824b2654e403dc1
x86_64 aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_5.x86_64.rpm 8f7a057bfdc426aa97c2e314ae638bc32e67decaedbcc2c40c315447d3228fef
x86_64 aspnetcore-targeting-pack-8.0-8.0.14-1.el9_5.x86_64.rpm 92858715df3f847cd7d439a72dc52a1203a47caaee29538bda6944d78671a9cd
x86_64 dotnet-sdk-8.0-8.0.114-1.el9_5.x86_64.rpm a57a6e63148076dcbf36c23b78b2b941a904d01a8ac1979f64e2b60541b5bda2
x86_64 dotnet-templates-8.0-8.0.114-1.el9_5.x86_64.rpm b1e798049a3445e2c506fb9c6f15e4b211d49ccd3cfebb4de08972688eaa4f35
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el9_5.x86_64.rpm bf554e7656d1ea9a870e5579737b199ab1dc027dffccee922d943ee1268760f3
x86_64 dotnet-hostfxr-8.0-8.0.14-1.el9_5.x86_64.rpm c248032fea2a3b5142819d9aeba67ee8a3d0f18a53924347d845d9bfb395f15d
x86_64 dotnet-apphost-pack-8.0-8.0.14-1.el9_5.x86_64.rpm e54534e48c5c9567d3a69ffd847a477780ceaa2d0a79b48bacbf0cf6f6a9421d
x86_64 dotnet-targeting-pack-8.0-8.0.14-1.el9_5.x86_64.rpm fcbe027d9434e2149dfc836f3c88c195e98fda265717aae1ea45dd9958a9d563
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.