This bug was fixed in the package dotnet8 - 8.0.112-8.0.12-0ubuntu1
---
dotnet8 (8.0.112-8.0.12-0ubuntu1) plucky; urgency=medium
* New upstream release (LP: #2094272).
* Unified source build transition. The debian source tree for dotnet*
source packages is now build from a com
This bug was fixed in the package dotnet8 -
8.0.112-8.0.12-0ubuntu1~22.04.1
---
dotnet8 (8.0.112-8.0.12-0ubuntu1~22.04.1) jammy; urgency=medium
* New upstream release (LP: #2094272).
* SECURITY UPDATE: remote code execution
- CVE-2025-21172: An integer overflow in msdia140.dll
This bug was fixed in the package dotnet8 -
8.0.112-8.0.12-0ubuntu1~24.04.1
---
dotnet8 (8.0.112-8.0.12-0ubuntu1~24.04.1) noble; urgency=medium
* New upstream release (LP: #2094272).
* SECURITY UPDATE: remote code execution
- CVE-2025-21172: An integer overflow in msdia140.dll
This bug was fixed in the package dotnet8 -
8.0.112-8.0.12-0ubuntu1~24.10.1
---
dotnet8 (8.0.112-8.0.12-0ubuntu1~24.10.1) oracular; urgency=medium
* New upstream release (LP: #2094272).
* SECURITY UPDATE: remote code execution
- CVE-2025-21172: An integer overflow in msdia140.
Dear SRU team, please reject the upload. Upstream has declared the
release as a security release after we uploaded it. We are already in
contact with the security team.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launc