dotnet8.0-8.0.127-1.el9_8.ML.1

エラータID: AXSA:2026-1276:12

リリース日: 
2026/07/17 Friday - 10:55
題名: 
dotnet8.0-8.0.127-1.el9_8.ML.1
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- serialize-javascript には、無限ループの発生に至る問題が
あるため、リモートの攻撃者により、サービス拒否攻撃 (DoS) を
可能とする脆弱性が存在します。(CVE-2026-34043)

- .NET には、無限ループの発生に至る問題があるため、リモートの
攻撃者により、サービス拒否攻撃 (リソース枯渇) を可能とする脆弱性
が存在します。(CVE-2026-42899)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-34043
Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object (an object that inherits from Array.prototype but has a very large length property), the process enters an intensive loop that consumes 100% CPU and hangs indefinitely. This issue has been patched in version 7.0.5.
CVE-2026-42899
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. dotnet8.0-8.0.127-1.el9_8.ML.1.src.rpm
    MD5: da7a72eb83e929ed4487f1e545672181
    SHA-256: ce7830d96ee16468d4d695cd9ceae06d681e9796baf185002163ed7d5010183a
    Size: 265.06 MB

Asianux Server 9 for x86_64
  1. aspnetcore-runtime-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: 5b814b69d77a69044fbe5c808bba2d62
    SHA-256: 873cf267abaa7f0e05e493e026885bb39dd7de2b4a83b8c7c7d707e00b463e91
    Size: 8.02 MB
  2. aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: e05efe7c4309f51737bbc5c90f6cc12e
    SHA-256: 1cbbf2e0a119d4ec20af5bb81365f8dab19b8809ec78bda21e26f3bb1b29d738
    Size: 6.53 MB
  3. aspnetcore-targeting-pack-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: 3fb8a22fe4f4cccb1e8703ab685d7229
    SHA-256: b60e12d14b002002ae420ad800234b2d433b4582ea4f10d0b21e49a70253df29
    Size: 1.93 MB
  4. dotnet-apphost-pack-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: 30c923bbd9f159746a7b220e89849fe0
    SHA-256: ca0eaeb23273a768716d5fd961961d1d8cb54ebaa1985aa366277148e335bc50
    Size: 4.06 MB
  5. dotnet-hostfxr-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: e77ac9d0460e545430bb6535dfbd01d6
    SHA-256: 40de78cf9a1dae341ba539babcb4f6c4f8ea21624b8efb43aa3434b9bc888fe4
    Size: 142.07 kB
  6. dotnet-runtime-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: 1b97fb7f622f69dd0ea3fa47da3cc2f2
    SHA-256: 99347e502d305fe96853f95ff383736bca823c6b029a4c66a29ffb970fe6a0be
    Size: 23.51 MB
  7. dotnet-runtime-dbg-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: 18f06b8ed18b64895ff8272508fec960
    SHA-256: c30ef0e4959c4ea436fcff2bf8dbbfc07db354a259cc679e23c01a5255814cb6
    Size: 14.97 MB
  8. dotnet-sdk-8.0-8.0.127-1.el9_8.ML.1.x86_64.rpm
    MD5: d78f1b76f063ccb8ac01e383e717fcf6
    SHA-256: f8fa084e2e1f0d0efee502886237c469aea28f089d598fca7c3de5f4eb45b1cf
    Size: 87.58 MB
  9. dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el9_8.ML.1.x86_64.rpm
    MD5: c293d8e399239bf60037e694420c1298
    SHA-256: 444a90f2950e39833362803bb5e67625c4139b93af93527f9be52ed95b908f23
    Size: 652.47 MB
  10. dotnet-sdk-dbg-8.0-8.0.127-1.el9_8.ML.1.x86_64.rpm
    MD5: 2c7974a911d47892db1b754efa4178e5
    SHA-256: 0224e6b90986a6bfb142ddebf123ef37ba77ea49fded0829d51730128b4ba1be
    Size: 59.23 MB
  11. dotnet-targeting-pack-8.0-8.0.27-1.el9_8.ML.1.x86_64.rpm
    MD5: 652534d5476473bea4dff1f607c25656
    SHA-256: 15c1ed1f7bb48a940d7e7181663ac3b1aa86d8a4cd73eaec7f1b7f9e3a81e05d
    Size: 2.91 MB
  12. dotnet-templates-8.0-8.0.127-1.el9_8.ML.1.x86_64.rpm
    MD5: c01d74bd3d828532ef5bc0bedb892524
    SHA-256: 601634ab3e3c48b52caa9988a5a146959aa64a389323762967e12a2926f00a9a
    Size: 2.08 MB