[ALSA-2026:21291] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2026-05-28
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es): * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043) * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-runtime-dbg-8.0-8.0.27-1.el8_10.aarch64.rpm 0fc0d4edef519e234ada69c991eb8b6bf3a853ca103b888def3a328e830f1bbd
aarch64 dotnet-targeting-pack-8.0-8.0.27-1.el8_10.aarch64.rpm 13ca695bd870c653c5a5757e79e84b6cc8fb5a76c2d99d77494cfd677f592e31
aarch64 aspnetcore-runtime-8.0-8.0.27-1.el8_10.aarch64.rpm 1425a088869e2322e382bc3ce1d74faa6a7191ff329a23d31f7b62ca88e0e7f6
aarch64 aspnetcore-targeting-pack-8.0-8.0.27-1.el8_10.aarch64.rpm 49a938a6dfbf04ec704fe37139cd710cab8ca27d9a0fddbb6012d74c6abb7d34
aarch64 dotnet-runtime-dbg-8.0-8.0.27-1.el8_10.aarch64.rpm 4a3db89f97cb7a0948d13ffebab80bd7ff301931fea1fdedc67f2b24e77c69a6
aarch64 dotnet-runtime-8.0-8.0.27-1.el8_10.aarch64.rpm 6ba762e0a87e9a9aac76eb0e7695d087c53af17b55202f75f1d42783e1d7444e
aarch64 dotnet-templates-8.0-8.0.127-1.el8_10.aarch64.rpm 7605a4a6d55bff9e8717cf68090c33700b26e0c9b660550fe3654ea86e58a6b2
aarch64 dotnet-sdk-8.0-8.0.127-1.el8_10.aarch64.rpm d3b19bab6becc6c64403f9fb4da56e2078b952f01e44a32c05ab12f7048336f7
aarch64 dotnet-hostfxr-8.0-8.0.27-1.el8_10.aarch64.rpm e0bba004e911897b44e1485f1e74522ad914c78eb77460e083fc56795db1ad99
aarch64 dotnet-apphost-pack-8.0-8.0.27-1.el8_10.aarch64.rpm e587301fd44bb9120ad540203d0ace84bc6f75200a119c4009870749578a33eb
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el8_10.aarch64.rpm e59d3b3c840df934f401ebae30871de82170bc15e094c3a582b36f4ce50d5069
aarch64 dotnet-sdk-dbg-8.0-8.0.127-1.el8_10.aarch64.rpm f239fabb80b78f4fb1bbde4600d9f35f29b0cfc19cc5dd7a644403fa4aecc85f
ppc64le aspnetcore-targeting-pack-8.0-8.0.27-1.el8_10.ppc64le.rpm 08e1593c4119c48be4c53555fbec3853d703bc75a23969391d7132f9a7bdbbf5
ppc64le dotnet-apphost-pack-8.0-8.0.27-1.el8_10.ppc64le.rpm 4a111727c05fd5f17f3c422388cc0ef8171dc9d3e5288a9d2d224e62641e9c98
ppc64le dotnet-templates-8.0-8.0.127-1.el8_10.ppc64le.rpm 53e34fcac93aad19eb78fcfe5a8995f4112ce60993a4bdb1684ce3ed9a14fbbb
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el8_10.ppc64le.rpm 65f1074cfec9d32c141803d412c7b96e45344cc41fc3bb7ba84518f2cb98fb1a
ppc64le dotnet-sdk-8.0-8.0.127-1.el8_10.ppc64le.rpm a707a374e70f2427df1fdf02f6fbe938627e98fecd18204ee7f2bfd2e81d40c9
ppc64le dotnet-hostfxr-8.0-8.0.27-1.el8_10.ppc64le.rpm b52b79a6cd7ed138e697c3cb467e62c8c74dcfcc25aa2a2b75391cb3d1b5805a
ppc64le dotnet-runtime-8.0-8.0.27-1.el8_10.ppc64le.rpm ca0fc8b0d9b93013f9d09bf4d66d1a713ff1a25e015d421cbfed7dc988b27078
ppc64le dotnet-sdk-dbg-8.0-8.0.127-1.el8_10.ppc64le.rpm dba9e8aee514926d92205331dfbb1830bc7a6b268fa4b47cf7b9494d356e7d46
ppc64le aspnetcore-runtime-dbg-8.0-8.0.27-1.el8_10.ppc64le.rpm e2f0566a81dd14a0d80b22a5028ebbfc867a2c3b293ca5ec7ef73711f700b34a
ppc64le dotnet-targeting-pack-8.0-8.0.27-1.el8_10.ppc64le.rpm ed2b9deba24804696682e64c267f4cd59986e3689d338e8c85114cfe979bca49
ppc64le aspnetcore-runtime-8.0-8.0.27-1.el8_10.ppc64le.rpm ee682b1a9169a260515e8d83d46d722a890b837f95599c9c7e28b01423c6357d
ppc64le dotnet-runtime-dbg-8.0-8.0.27-1.el8_10.ppc64le.rpm f54c1cd0c02406d51636ed56e4b44f400d517ca6f21add1d7b7377f35b255ce3
s390x aspnetcore-runtime-dbg-8.0-8.0.27-1.el8_10.s390x.rpm 1540a631ca2d1841c0b8c2e473afb1ebd2a68bb4ce70c3a01281bd4bd56ff6bd
s390x dotnet-targeting-pack-8.0-8.0.27-1.el8_10.s390x.rpm 30b0de932a79419370d828d64df8e473ff95b251ca89114647667cff918ef830
s390x aspnetcore-targeting-pack-8.0-8.0.27-1.el8_10.s390x.rpm 369209d7e2c3c33241260e27d98149a42b2197f94c2adeec80e4be1116ed18e0
s390x dotnet-runtime-8.0-8.0.27-1.el8_10.s390x.rpm 42df96f2b878c5d8e78278ab245c968eab82b1528a6d40987fb79a0e3045bb5f
s390x dotnet-apphost-pack-8.0-8.0.27-1.el8_10.s390x.rpm 5ab96fa3ee069c039091bff34bf56fba3837ce256779b39274bdf3826e090f64
s390x dotnet-hostfxr-8.0-8.0.27-1.el8_10.s390x.rpm 65f4e0bd56488ad7fcd046b245ad7e2cf0da3fe528cc4edac2c7f7b35292dc9c
s390x dotnet-templates-8.0-8.0.127-1.el8_10.s390x.rpm 697ca5e7e1f7a2b1d31ab88414881aaff2d18834354f110d238c1fb099690bfc
s390x aspnetcore-runtime-8.0-8.0.27-1.el8_10.s390x.rpm 806ffdd84e33ba1d9d8e95c01e97372c1dc3e467789b13751cfe231a6751c291
s390x dotnet-sdk-dbg-8.0-8.0.127-1.el8_10.s390x.rpm b6271bf1d5dcc71608b93e3af068cb41dba8299f6cbe1b1fa1bcee00fe422240
s390x dotnet-sdk-8.0-8.0.127-1.el8_10.s390x.rpm bd64e90c342ac5138209be8c763a123bf5ccf2ca3db086cab8759bde29094b5a
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el8_10.s390x.rpm cdf63f4026287c49b3f3019ed6335c173df83f6e9f11119cf88585e1a8b69b18
s390x dotnet-runtime-dbg-8.0-8.0.27-1.el8_10.s390x.rpm ec90da88e121dad4849f04a056ec19c797cfceeac8e7840626d121e2cc1983e2
x86_64 dotnet-sdk-8.0-8.0.127-1.el8_10.x86_64.rpm 0445dd302e161b36c05b59719a3ee0c24c1aa2b7facd2d94d129a57f44cbc594
x86_64 dotnet-sdk-dbg-8.0-8.0.127-1.el8_10.x86_64.rpm 1dc3436aff4d388ec2e9a6ae8c5494aefc5254fd6ae0627c0cf07c75300207b1
x86_64 dotnet-runtime-8.0-8.0.27-1.el8_10.x86_64.rpm 1fc175860d1ee93ce02a824b1d6c7410ff1917e96e5ce2fcf7267c4516155ed3
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el8_10.x86_64.rpm 2344d0d2e20f7d70315918addd1456130093324333e09db09b1c5828ebb4b57c
x86_64 dotnet-runtime-dbg-8.0-8.0.27-1.el8_10.x86_64.rpm 3967b401c20c420e5066df843f2e5720eef94e335f6df7bc46d03d6a2bf3184d
x86_64 aspnetcore-runtime-dbg-8.0-8.0.27-1.el8_10.x86_64.rpm 4d9d2f9a1aaeeae86b8312742ccf436b9ace120f16cd7c102a2cd47a3c2163a6
x86_64 dotnet-hostfxr-8.0-8.0.27-1.el8_10.x86_64.rpm 4fc77c158445429b23f27e0491b03152c719f2908b8b664252ead8972c56f0de
x86_64 dotnet-templates-8.0-8.0.127-1.el8_10.x86_64.rpm 6e50f09a77baa0be4f40679e8f92a7f664fa97be871f01ad076bd9f4b286e86b
x86_64 dotnet-targeting-pack-8.0-8.0.27-1.el8_10.x86_64.rpm c56877042d73153638dc957af769c06370caff6d9b88567b27de3fa11ac864e5
x86_64 dotnet-apphost-pack-8.0-8.0.27-1.el8_10.x86_64.rpm c8cada8bc451b06aebe1925a8a8a56497cf797cd6a9f42d84ec3c81c30c408f0
x86_64 aspnetcore-runtime-8.0-8.0.27-1.el8_10.x86_64.rpm e18d8129308b8daa94e96495ff99bbe3f6be1816c28a2748889f9a42e1d60249
x86_64 aspnetcore-targeting-pack-8.0-8.0.27-1.el8_10.x86_64.rpm f5054fa8012e55c71553c9a1ab13dc11b5a6175d5a5729dafccba092317fae37
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.