ELSA-2025-8814

Опубликовано: 30 июн. 2025

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2025-8814: .NET 8.0 security update (IMPORTANT)

[8.0.117-1.0.1]

Add support for Oracle Linux

[8.0.117-1]

Update to .NET SDK 8.0.117 and Runtime 8.0.17
Resolves: RHEL-94416

[8.0.116-2]

Update to .NET SDK 8.0.116 and Runtime 8.0.16
Resolves: RHEL-89447

[8.0.115-2]

Update to .NET SDK 8.0.115 and Runtime 8.0.15
Resolves: RHEL-85275

[8.0.114-2]

Update to .NET SDK 8.0.114 and Runtime 8.0.14
Resolves: RHEL-81643

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

aspnetcore-runtime-8.0

8.0.17-1.0.1.el10_0

aspnetcore-runtime-dbg-8.0

8.0.17-1.0.1.el10_0

aspnetcore-targeting-pack-8.0

8.0.17-1.0.1.el10_0

dotnet-apphost-pack-8.0

8.0.17-1.0.1.el10_0

dotnet-hostfxr-8.0

8.0.17-1.0.1.el10_0

dotnet-runtime-8.0

8.0.17-1.0.1.el10_0

dotnet-runtime-dbg-8.0

8.0.17-1.0.1.el10_0

dotnet-sdk-8.0

8.0.117-1.0.1.el10_0

dotnet-sdk-8.0-source-built-artifacts

8.0.117-1.0.1.el10_0

dotnet-sdk-dbg-8.0

8.0.117-1.0.1.el10_0

dotnet-targeting-pack-8.0

8.0.17-1.0.1.el10_0

dotnet-templates-8.0

8.0.117-1.0.1.el10_0

Oracle Linux x86_64

aspnetcore-runtime-8.0

8.0.17-1.0.1.el10_0

aspnetcore-runtime-dbg-8.0

8.0.17-1.0.1.el10_0

aspnetcore-targeting-pack-8.0

8.0.17-1.0.1.el10_0

dotnet-apphost-pack-8.0

8.0.17-1.0.1.el10_0

dotnet-hostfxr-8.0

8.0.17-1.0.1.el10_0

dotnet-runtime-8.0

8.0.17-1.0.1.el10_0

dotnet-runtime-dbg-8.0

8.0.17-1.0.1.el10_0

dotnet-sdk-8.0

8.0.117-1.0.1.el10_0

dotnet-sdk-8.0-source-built-artifacts

8.0.117-1.0.1.el10_0

dotnet-sdk-dbg-8.0

8.0.117-1.0.1.el10_0

dotnet-targeting-pack-8.0

8.0.17-1.0.1.el10_0

dotnet-templates-8.0

8.0.117-1.0.1.el10_0

Связанные CVE

CVE-2025-30399

Ссылки на источники

Связанные уязвимости

CVE-2025-30399

CVSS3: 7.5

ubuntu

около 2 месяцев назад

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2025-30399

CVSS3: 7.5

redhat

около 2 месяцев назад

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2025-30399

CVSS3: 7.5

nvd

около 2 месяцев назад

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2025-30399

CVSS3: 7.5

msrc

около 2 месяцев назад

.NET and Visual Studio Remote Code Execution Vulnerability

GHSA-266m-wp2v-x7mq

CVSS3: 7.5

github

около 2 месяцев назад

Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability