Red Hat Security AdvisoryRHSA-2025:7601
.NET 9.0 security update
Released 2025-05-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) aspnetcore-runtime-9.0-9.0.5-1.el10_0, aspnetcore-runtime-dbg-9.0-9.0.5-1.el10_0, aspnetcore-targeting-pack-9.0-9.0.5-1.el10_0 +12
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) dotnet-sdk-9.0-source-built-artifacts-9.0.106-1.el10_0
Fixes 1 record
Priority LOW 39
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01266 · Published 2025-05-13 · Partial fix · 8.0.16, 9.0.5 +12 CWE-73
