dotnet8.0-8.0.114-1.el8_10.ML.1

エラータID: AXSA:2025-9765:07

Release date: 
Monday, March 17, 2025 - 10:24
Subject: 
dotnet8.0-8.0.114-1.el8_10.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.

Security Fix(es):

* dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-24070
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Solution: 

Update packages.

CVEs: 
CVE-2025-24070
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Additional Info: 

N/A

Download: 

SRPMS
  1. dotnet8.0-8.0.114-1.el8_10.ML.1.src.rpm
    MD5: 0720ac48b8964dabd33d0bb18453c622
    SHA-256: 8518a29b88aed87c4482a0f8877d55f7d76dab203b9888aa83226681b1f619e4
    Size: 264.70 MB

Asianux Server 8 for x86_64
  1. aspnetcore-runtime-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: 700a71e00064123723b818b983cfd640
    SHA-256: 851b696620d4458e876370bd37891f70cdfc06a68747a06b8e9fdbc841b3b792
    Size: 8.07 MB
  2. aspnetcore-runtime-dbg-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: 5ceb95d9f078509e25db387b65dd8483
    SHA-256: 6a8faa63fc799cd7b67c7fd5e7e5429ca889269b1775a53fc4f07b70fcb99fca
    Size: 6.76 MB
  3. aspnetcore-targeting-pack-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: 02472dfa118d23c62b59176845874189
    SHA-256: 5446e3337bbe9eef698893bab4da615fb1b0a92cce1d7c0295f5f7cd9c44c076
    Size: 1.98 MB
  4. dotnet-apphost-pack-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: 4cb1ae25222fad714716e1adf8408db3
    SHA-256: 3a312497e6e33fd0d0c4fc4c8e421a040061d3a2991966fe82e035403cd92d7d
    Size: 4.05 MB
  5. dotnet-hostfxr-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: 01ebba2fc6f1e3af88087e7b7f10d894
    SHA-256: 3f1eebbf7be224181ffcaf0f0f1bfe03dba6b32061c8658a87f12fc65320e833
    Size: 154.22 kB
  6. dotnet-runtime-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: 6d97041151c62532ea337d9b95a6a67a
    SHA-256: 275980516d734a06950178cca0d796528a4cfcb8dbb19064f845921f317ee7bd
    Size: 23.70 MB
  7. dotnet-runtime-dbg-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: f5d9c7c0cd004d80db270724bb928812
    SHA-256: c4929a92f6553318584a33da645c93e1768fcab408b93cdced9a9360cde97bd4
    Size: 15.11 MB
  8. dotnet-sdk-8.0-8.0.114-1.el8_10.ML.1.x86_64.rpm
    MD5: 0e49e1a7582be1effa2977c8dfab27e1
    SHA-256: a64071fdc0ddf89c1eef8fa7cf91821799e9e7ec8d2e128d512de9da6638346b
    Size: 89.00 MB
  9. dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el8_10.ML.1.x86_64.rpm
    MD5: 7a8be6d68e71203d590b41561a2701ae
    SHA-256: 2106ad9e064692e92c47839eaacabf0559df064b8ea61a2492fdc4b6b91db689
    Size: 702.93 MB
  10. dotnet-sdk-dbg-8.0-8.0.114-1.el8_10.ML.1.x86_64.rpm
    MD5: 08f42a5c69f25455b9978143358b2bcb
    SHA-256: 281564169829611279224d0b50ae799cd07161bcdeac12d84625c2603c430d50
    Size: 61.24 MB
  11. dotnet-targeting-pack-8.0-8.0.14-1.el8_10.ML.1.x86_64.rpm
    MD5: fe2329e2adb3a747df7867b25a86e174
    SHA-256: 1ce78ba6068b02af2e65e7419319b0374006f3044a71b2f248aa3608bdffe7fc
    Size: 3.11 MB
  12. dotnet-templates-8.0-8.0.114-1.el8_10.ML.1.x86_64.rpm
    MD5: 9cc5569081b5cc2500f0b0c41de1f76c
    SHA-256: dd86b288af93724f354b277e9a440e48dbc9505c434c5f210e0c672da3c8bab9
    Size: 2.38 MB