UbuntuUpdates.org

Package "dotnet9"

Name: dotnet9

Description:

.NET CLI tools and runtime
Latest version: 9.0.112-9.0.11-0ubuntu1~25.04.1
Release: plucky (25.04)
Level: updates
Repository: universe
Homepage: https://dot.net

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "dotnet9"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "dotnet9" in Plucky

Repository Area Version
base universe 9.0.105-9.0.4-0ubuntu1
security universe 9.0.111-9.0.10-0ubuntu1~25.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 9.0.112-9.0.11-0ubuntu1~25.04.1 2025-12-09 18:32:42 UTC

  dotnet9 (9.0.112-9.0.11-0ubuntu1~25.04.1) plucky; urgency=medium

  * New upstream release (LP: #2130894)
  * d/{sdk-check-config.json,rules}: `dotnet sdk check` tool points to
    Canonical's release database.
  * d/eng/test-runner/*/obj: removed unwanted build artifact directory from
    source package.
  * d/t/regular-tests: synced with upstream to fix failing tests and add new
    ones for .NET 10.

 -- Mateus Rodrigues de Morais <email address hidden> Fri, 07 Nov 2025 17:01:22 +0100
Source diff to previous version
2130894 [SRU] New upstream microrelease .NET 9.0.112/9.0.11

Version: 9.0.111-9.0.10-0ubuntu1~25.04.1 2025-10-14 22:07:32 UTC

  dotnet9 (9.0.111-9.0.10-0ubuntu1~25.04.1) plucky; urgency=medium

  * New upstream release
  * SECURITY UPDATE: denial of service
    - CVE-2025-55247: A vulnerability exists in .NET Core where predictable
      paths for MSBuild's temporary directories on Linux let another user
      create the directories ahead of MSBuild, leading to DoS of builds.
  * SECURITY UPDATE: validation bypass
    - CVE-2025-55315: Inconsistent interpretation of http requests
      ('http request/response smuggling') in ASP.NET Core allows an authorized
      attacker to bypass a security feature over a network.
  * SECURITY UPDATE: information disclosure
    - CVE-2025-55248: MITM (man in the middle) attacker may prevent use of TLS
      between client and SMTP server, forcing client to send data over
      unencrypted connection.
  * eng/test-runner: sync changes with upstream
  * tests/control, tests/regular-tests: sync changes with upstream
  * debian/rules: use release.json manifest instead of legacy text file

 -- Dominik Viererbe <email address hidden> Wed, 08 Oct 2025 13:49:49 +0300
Source diff to previous version
CVE-2025-55247 Improper link resolution before file access ('link following') in .NET ...
CVE-2025-55315 Inconsistent interpretation of http requests ('http request/response s ...
CVE-2025-55248 Inadequate encryption strength in .NET, .NET Framework, Visual Studio ...

Version: 9.0.110-9.0.9-0ubuntu1~25.04.1 2025-09-23 14:07:35 UTC

  dotnet9 (9.0.110-9.0.9-0ubuntu1~25.04.1) plucky; urgency=medium

  * New upstream release (LP: #2122355)

 -- Dominik Viererbe <email address hidden> Mon, 08 Sep 2025 20:43:18 +0300
Source diff to previous version
2122355 [SRU] New upstream microrelease .NET 9.0.110/9.0.9

Version: 9.0.109-9.0.8-0ubuntu1~25.04.1 2025-08-15 01:07:14 UTC

  dotnet9 (9.0.109-9.0.8-0ubuntu1~25.04.1) plucky; urgency=medium

  * New upstream release (LP: #2119538)

 -- Dominik Viererbe <email address hidden> Tue, 05 Aug 2025 16:36:57 +0300
Source diff to previous version
2119538 [SRU] New upstream microrelease .NET 9.0.109/9.0.8

Version: 9.0.108-9.0.7-0ubuntu1~25.04.1 2025-07-18 00:13:56 UTC

  dotnet9 (9.0.108-9.0.7-0ubuntu1~25.04.1) plucky; urgency=medium

  * New upstream release (LP: #2115830)

 -- Dominik Viererbe <email address hidden> Wed, 02 Jul 2025 16:38:30 +0300
2115830 [SRU] New upstream microrelease .NET 9.0.108/9.0.7


About   -   Send Feedback to @ubuntu_updates