[ALSA-2026:41893] Important: .NET 8.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-07-31
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 [almalinux-10.2.z] (JIRA:AlmaLinux-192468) * dotnet8.0: Reduce time to detect hanging builds during .NET RPM builds (c10s) [almalinux-10.2.z] (JIRA:AlmaLinux-192329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-dbg-8.0-8.0.29-1.el10_2.aarch64.rpm 018b3fba8653b30d29ec209837976da137269e5bbe3110c876e97ea4011a1bb1
aarch64 dotnet-targeting-pack-8.0-8.0.29-1.el10_2.aarch64.rpm 284c77c1afd4fc3156289bf962e94caa72daee3c31dd13bd1957366a6f2d48be
aarch64 aspnetcore-runtime-8.0-8.0.29-1.el10_2.aarch64.rpm 3cc3940332edf2ab0f85e5ac458b40f70dfb931582520a03a4cebf255a1a2a6e
aarch64 aspnetcore-targeting-pack-8.0-8.0.29-1.el10_2.aarch64.rpm 7170459b7eb59d853e557214a43219ee55e0dcd84abfb54aa2a38788fff03dbc
aarch64 aspnetcore-runtime-dbg-8.0-8.0.29-1.el10_2.aarch64.rpm 808f8a73f463b6d6bb6fa9243e7c60b57273ea0dea7df6034fe2d239db4a2c49
aarch64 dotnet-sdk-dbg-8.0-8.0.129-1.el10_2.aarch64.rpm 863fd306436eb675fccef1eaf772b01e5b1d9080e4ca449f95295bb6ff894af8
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el10_2.aarch64.rpm b5750b4d2c8fd4afb964d670c14ee06b9ccd08f9f2e7b833c8ea55fb7bf65cb4
aarch64 dotnet-runtime-8.0-8.0.29-1.el10_2.aarch64.rpm b9ee47ccfeba4cf7a058c59afc07df099e5dce524c1464d9e28c3e3cd4c05e9b
aarch64 dotnet-sdk-8.0-8.0.129-1.el10_2.aarch64.rpm bdd4844ee6cdad91ee269dcb103e666364bc62ea63391e4fc9e87284e54f28a0
aarch64 dotnet-apphost-pack-8.0-8.0.29-1.el10_2.aarch64.rpm d3f244af3dd4596141b86e15a87f75619d14ad9ce1c03ab7cef7592a5d61b122
aarch64 dotnet-templates-8.0-8.0.129-1.el10_2.aarch64.rpm f8ca2c7d56170992435ee79ded8426eaec7f8d6eaaf1ca80ceafaacdcf57af53
aarch64 dotnet-hostfxr-8.0-8.0.29-1.el10_2.aarch64.rpm ff7ce3a0d1f10b663da75acb9c67ad9bbd2bb3814483992327f732477ae9a2a3
ppc64le dotnet-targeting-pack-8.0-8.0.29-1.el10_2.ppc64le.rpm 12f0e1a1f258ee777372e2fe01ea843ac61ae0764287609b0581ebe99ffc4934
ppc64le dotnet-hostfxr-8.0-8.0.29-1.el10_2.ppc64le.rpm 16dd24bdbea9a4e3b5aa6a9a62e0ece60b8d31815dde2906803a74305c261ae5
ppc64le dotnet-sdk-dbg-8.0-8.0.129-1.el10_2.ppc64le.rpm 27fa64eef967e49dcf4f97fb1fccd2465a48446c30e9c75b19cde7ab01359d32
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el10_2.ppc64le.rpm 46124c424b0e750909d2ed88cad1458fd5cdfa1c77cfc18ac26a742968359570
ppc64le dotnet-runtime-8.0-8.0.29-1.el10_2.ppc64le.rpm 6425ce6925b207000354d1b91734e1d9fd94a83ab259061a23dc4c13b2930fc2
ppc64le aspnetcore-runtime-8.0-8.0.29-1.el10_2.ppc64le.rpm 8bbd4ac07a96bcc160d9b441243f6b4fefdc9cb8b6cca04e13fc0c4e85b2c703
ppc64le dotnet-runtime-dbg-8.0-8.0.29-1.el10_2.ppc64le.rpm 8da4415e530a366f8b9e524cb270c4054e4e372ae4248a7568f69e60188e5245
ppc64le dotnet-sdk-8.0-8.0.129-1.el10_2.ppc64le.rpm 9d65789ea7bcdac1ed178a42af211cdd7311bc59509d36bc8c9d1cda291a592c
ppc64le aspnetcore-targeting-pack-8.0-8.0.29-1.el10_2.ppc64le.rpm b05a6f3e4751a54bbf055fa588e90dd35dba1a6d655119a7dd6d1dd760a86447
ppc64le dotnet-apphost-pack-8.0-8.0.29-1.el10_2.ppc64le.rpm e2e75ed2358b7305acaa4e804c8953cc8712de7b1237917e36de28f976d77f0d
ppc64le aspnetcore-runtime-dbg-8.0-8.0.29-1.el10_2.ppc64le.rpm eec4709fb806d28512cdb5f31214a39992964bf36b808bf556f8118fac6dbef0
ppc64le dotnet-templates-8.0-8.0.129-1.el10_2.ppc64le.rpm ffacfec56df8f8eedda1887f48adc1443fc6bd04f9f22c58168bf7e4bc4de1ab
s390x dotnet-targeting-pack-8.0-8.0.29-1.el10_2.s390x.rpm 06b8791c9ae676909c8ddba024509cbf8cb3cd0016c6006094ff2de1eed54d7c
s390x dotnet-runtime-8.0-8.0.29-1.el10_2.s390x.rpm 596b5b009ff88e61490b64d4ef1600dd5114742bd06324a6c9ab8b98d037d4f2
s390x aspnetcore-runtime-dbg-8.0-8.0.29-1.el10_2.s390x.rpm 685d1bb1326b0ef9866d858cf55130f79e0569b68c252bf5276931ea8eb4a9cd
s390x dotnet-hostfxr-8.0-8.0.29-1.el10_2.s390x.rpm 7059c8ec5773f2b0332c5db59ec8a74bbad37994594fc2fc19ff126810d063cc
s390x aspnetcore-targeting-pack-8.0-8.0.29-1.el10_2.s390x.rpm 7af435b8091dc1e245fe815d4fb08c8621ac45fd1c1c0c89b9d6c0083abc7fb7
s390x dotnet-sdk-8.0-8.0.129-1.el10_2.s390x.rpm 84e0eab97b231cd12c27dab0ad55e9931c2210521b59037e70d6732083da4b23
s390x dotnet-templates-8.0-8.0.129-1.el10_2.s390x.rpm 8ee7290005ad3cd7e2e05bb5282f4e388c55cade2347e8eb974eedad9ead9a6b
s390x aspnetcore-runtime-8.0-8.0.29-1.el10_2.s390x.rpm a1d618a5819a7045bbe38e607741545479843eac42d646656c220180eeee5977
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el10_2.s390x.rpm a31fe3c3e43877aa7f30a2cc9d4a7df2477df0f32f883550989841f927306418
s390x dotnet-runtime-dbg-8.0-8.0.29-1.el10_2.s390x.rpm a630434f06e6c679045eb633e7a71883688e1cd595ba1d7ce1bc1bdd0b0189fc
s390x dotnet-apphost-pack-8.0-8.0.29-1.el10_2.s390x.rpm e250f787b86d5d8fad52cf5c98b79348308c1caf9e5df8318b32d81e96ba7540
s390x dotnet-sdk-dbg-8.0-8.0.129-1.el10_2.s390x.rpm ff712b329e472cf5fdc713baf20320e7f8867a9729a2637c01e702c6ec323096
x86_64 dotnet-sdk-8.0-8.0.129-1.el10_2.x86_64.rpm 03ac16fcb9359f856ade5bf9e4752c515ef8043fa87e1aeee424790a2aadf5ca
x86_64 dotnet-hostfxr-8.0-8.0.29-1.el10_2.x86_64.rpm 198806dfc3e82c88f2c298df708ebeb7ed79c308ca20f9cda6580653789320fe
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el10_2.x86_64.rpm 4184c0416f0a94991b52c85747167b18c18a28e71b2e78104eeaefdc8ea5ae20
x86_64 aspnetcore-runtime-8.0-8.0.29-1.el10_2.x86_64.rpm 5f8edb92708d28133a4476701a9f801cbb1de39a3245ed6eb2dffc36711d7fa2
x86_64 dotnet-templates-8.0-8.0.129-1.el10_2.x86_64.rpm 6c7919336bf1e1a0c2c57691652262aa9dca9c8160134dae0fa76d8f1714b7a5
x86_64 dotnet-targeting-pack-8.0-8.0.29-1.el10_2.x86_64.rpm 711fd29e079e9c772a41354eed9f988115b429989cadfedfac9ecd4a044bcef4
x86_64 dotnet-apphost-pack-8.0-8.0.29-1.el10_2.x86_64.rpm 800e73465e38bc395733b5ec6c103135eb512f134037ea4d0c4a163c9f9d2d11
x86_64 dotnet-runtime-dbg-8.0-8.0.29-1.el10_2.x86_64.rpm 884c5f4bdf08e219d889c01880ee25a1466a4dfacaff508ba3457a1e15077532
x86_64 aspnetcore-targeting-pack-8.0-8.0.29-1.el10_2.x86_64.rpm 947ce9dc8731f3143bf5a76a041f4595a80a7bf9d57a16995558da0bfc423293
x86_64 dotnet-sdk-dbg-8.0-8.0.129-1.el10_2.x86_64.rpm bae642d70d9b13f50edc3aa1aac005241e3c4ad9057ecabb1b6b6c4f6d88ac36
x86_64 aspnetcore-runtime-dbg-8.0-8.0.29-1.el10_2.x86_64.rpm c290b855c0ec4a9df1fa8124e36e8c8a6ddb09d08b8e154c29c6cec82b47ccd5
x86_64 dotnet-runtime-8.0-8.0.29-1.el10_2.x86_64.rpm d635d8f928851785a6ef8dd059cc1e1adfc2b431f7bd5ce80e39f4a8180c28d4
x86_64_v2 dotnet-hostfxr-8.0-8.0.29-1.el10_2.x86_64_v2.rpm 0e010a8e82eb3e8d6a005904c8705de1718d4f678b32fd26bdccb86899fa838a
x86_64_v2 aspnetcore-targeting-pack-8.0-8.0.29-1.el10_2.x86_64_v2.rpm 294819d619d5983353fe9f148fe0978edc308fbf4a6e06ecb54c60cb50e38cc4
x86_64_v2 dotnet-runtime-dbg-8.0-8.0.29-1.el10_2.x86_64_v2.rpm 3d954260f083c0688ba829d63220296e639fd4dc93edefd61177c2282af6a425
x86_64_v2 dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el10_2.x86_64_v2.rpm 608d26f14c633b5b911920ec37dd9bcc7616f289c7edbc289816beca03787d89
x86_64_v2 aspnetcore-runtime-dbg-8.0-8.0.29-1.el10_2.x86_64_v2.rpm 8015f97f82960613227d975ddf5cdf8d7e139073c24d031c44cf9c263921a44a
x86_64_v2 dotnet-sdk-dbg-8.0-8.0.129-1.el10_2.x86_64_v2.rpm 9c43c35c8ec4ceb5462d2703e3bd42f973280d57a501cc9b5dde3e6f93b8ceb7
x86_64_v2 dotnet-runtime-8.0-8.0.29-1.el10_2.x86_64_v2.rpm a7d76c909082c1dfd25f891c965f089ebe456424179d6cafd0d46bdcd1002ac8
x86_64_v2 dotnet-apphost-pack-8.0-8.0.29-1.el10_2.x86_64_v2.rpm ab37c5882c6ef03169197270515cd8b6779931412a9858ed4c8fd5e1fe495907
x86_64_v2 dotnet-targeting-pack-8.0-8.0.29-1.el10_2.x86_64_v2.rpm abc28728eaa3720f90b2746113fee5eccf6d327d15c36ee16a176c341bb4b72b
x86_64_v2 aspnetcore-runtime-8.0-8.0.29-1.el10_2.x86_64_v2.rpm b8675dc48e88147b51777a05722bed7a24ff7d77e428617103c26b9c4ed4d44b
x86_64_v2 dotnet-templates-8.0-8.0.129-1.el10_2.x86_64_v2.rpm e67f6b5ad82daf2df1fd0f46f86663f648de3f178d0acfd2527329c5039f2b55
x86_64_v2 dotnet-sdk-8.0-8.0.129-1.el10_2.x86_64_v2.rpm f74e8082689fca37a0711270b1bf1dcd685b2a4d6835d4750bde4f53a64ee0ff
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.