Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-26646: External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | aspnetcore-runtime-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | aspnetcore-runtime-dbg-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | aspnetcore-targeting-pack-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-apphost-pack-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-apphost-pack-8.0-debuginfo | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-host | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-host-debuginfo | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-hostfxr-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-hostfxr-8.0-debuginfo | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-runtime-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-runtime-8.0-debuginfo | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-runtime-dbg-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-8.0 | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-8.0-debuginfo | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-8.0-source-built-artifacts | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-dbg-8.0 | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-targeting-pack-8.0 | 0:8.0.16-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-templates-8.0 | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet8.0-debuginfo | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet8.0-debugsource | 0:8.0.116-1.amzn2023.0.1 |
| Amazon Linux · 2023 | netstandard-targeting-pack-2.1 | 0:8.0.116-1.amzn2023.0.1 |
Vulnerabilities 1
-
High 8.0
.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-26646.html