[ALSA-2026:25110] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2026-06-11
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-templates-8.0-8.0.128-1.el8_10.aarch64.rpm 30d6c80e0ab3c5177b7ff225b34d8791182d1c9adfe9a2b248c03aeff44936aa
aarch64 aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.aarch64.rpm 32d3fb1c2169fedf4a19f653f81885e884f13cd257df0b1a227d2b8135080bdc
aarch64 dotnet-hostfxr-8.0-8.0.28-1.el8_10.aarch64.rpm 3941c18b8a00cb6a3a71d380e2a5608e5d1d9ff3754dad9ede87ef1bd8689182
aarch64 dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.aarch64.rpm 4440f7e15ad9cf55def883f69d725885d685a0be3993045228d13d93bb21c18e
aarch64 dotnet-runtime-8.0-8.0.28-1.el8_10.aarch64.rpm 44ef85b10db3a3fe4296d12c08cca39b192e37d6a574237901c324abeda9f07b
aarch64 dotnet-targeting-pack-8.0-8.0.28-1.el8_10.aarch64.rpm 5ea2f758762859f9671efe0435f1e04eb9dde27a409064665646ad45ad088bf6
aarch64 aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.aarch64.rpm 6e2cb704af979f137d6621e3a2bdacc793c769a80baf1725185df6d080f27987
aarch64 dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.aarch64.rpm 830fe670a5d2d9069af8be7296059f4e2723e95d4630ad896984aafe5c583450
aarch64 aspnetcore-runtime-8.0-8.0.28-1.el8_10.aarch64.rpm 91ac9cc9d6c426c51b38625386e4b148714d419105851cc7ff2806582d437d3f
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el8_10.aarch64.rpm d9c3dde53e7c24e64f3005e39ba2138a45d055d7d3f61a8fd0c6223f43cedeb9
aarch64 dotnet-apphost-pack-8.0-8.0.28-1.el8_10.aarch64.rpm ec23dc4aa24c8a2269882cbc66227247fb4223c4cd614fc1b80d80792ff59458
aarch64 dotnet-sdk-8.0-8.0.128-1.el8_10.aarch64.rpm ffe432a8e940336d26cba6ceb4be9d0dbbdbd820e553f15ee82b0632435c82e1
ppc64le dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.ppc64le.rpm 0566db45013fb4227a66e2f60e4ce6a91e06165e336d663e3cef7be61dc6577a
ppc64le dotnet-templates-8.0-8.0.128-1.el8_10.ppc64le.rpm 0586a7ef480b22e333c49082cc057e4ab132ca63f135ebd10aef60f3b2faaca6
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el8_10.ppc64le.rpm 0ab45f46f96a0ecb3097c8ab535a6941e90cb90e7fbe84e8fd183de0febd451a
ppc64le aspnetcore-runtime-8.0-8.0.28-1.el8_10.ppc64le.rpm 0e476dcf8ffe80cc79b1f7a02489eaac28b605322d2d3ccbce2a78db4dce8ffb
ppc64le dotnet-runtime-8.0-8.0.28-1.el8_10.ppc64le.rpm 43c77f23ffc4868ffd6633b29063c8e404409a4a2191d9347e5f9c67596c49a4
ppc64le dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.ppc64le.rpm 48ecf4c11d3a5b9c8912bd203ecb8c5b00b3f360c1d8fbd3f9226e247403021f
ppc64le aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.ppc64le.rpm 555248bc216fe9231afc85b84c4a87b13b4ee3229a438846d9d3e99ebb20c430
ppc64le dotnet-apphost-pack-8.0-8.0.28-1.el8_10.ppc64le.rpm 7824a2cdf9b93afccbf2fe236ef83f43c8329d22f049c730ce61a0450706b888
ppc64le dotnet-sdk-8.0-8.0.128-1.el8_10.ppc64le.rpm aa76edb52d645a2e09d517e0e4ac97ba6e031bfad0deaa7efdcb17a131a18823
ppc64le aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.ppc64le.rpm cc5fe3a96872abe46ffa4d136bfeb3d77aafc60fd399a5e329a25d78a59b6ba8
ppc64le dotnet-hostfxr-8.0-8.0.28-1.el8_10.ppc64le.rpm d3dda2f5142ae3318d2f59d7aef98994271eb73bac0b7bcc52a1bc5fa7d07ff3
ppc64le dotnet-targeting-pack-8.0-8.0.28-1.el8_10.ppc64le.rpm f5d9aa9e645bf2e1a58edd447cce5e1468884faae243fc4368f154674d5e4125
s390x dotnet-sdk-8.0-8.0.128-1.el8_10.s390x.rpm 079fc8c205e2695383cec0c797dd774b3d86db03d24c8953096b9c5be4ac9874
s390x dotnet-apphost-pack-8.0-8.0.28-1.el8_10.s390x.rpm 08af0e41a8a24d858001b64958e2d9ac762c2726efd81260fdf569a3f9efd04a
s390x dotnet-hostfxr-8.0-8.0.28-1.el8_10.s390x.rpm 1f20d232430c5d935460f9f1f48ebf522c7714c55534045ded5a560425de5b32
s390x dotnet-targeting-pack-8.0-8.0.28-1.el8_10.s390x.rpm 27b58b5e0d3b26e201ca641fc07114fb88a4fe7635cb8ef9c3bc5b697fae0e59
s390x dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.s390x.rpm 38c9e10a89b7074f0d0b399a9a56bda6abead117a1b73a59ba007f2ac0bee265
s390x aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.s390x.rpm 6f6b65b6218de855cff2ca6d89c182d8c6c2ed6ace5a603c6a14b10e58f578b9
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el8_10.s390x.rpm 97c4e75f7a4642ac86798a7c2d4c73fc54d69cae2ef92834f19abacc1d9ebe86
s390x dotnet-templates-8.0-8.0.128-1.el8_10.s390x.rpm a6ccfd5cdc55a68d343a672a02c34687b336069cae5ba7747c09758f8a18c6c9
s390x aspnetcore-runtime-8.0-8.0.28-1.el8_10.s390x.rpm b70e391b1ade62985728ceb96ca58ab02eba2c5c9bb82501d7bb0d896158712f
s390x dotnet-runtime-8.0-8.0.28-1.el8_10.s390x.rpm dd5d633c7217680a5d6ee993e46b6f610475013e331db83326ddbc33eb864802
s390x dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.s390x.rpm ee9ad5bbca31480a863940de70957092bc60934562c1f63a5177fa6c36157b1a
s390x aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.s390x.rpm fa7770fdc6996dde4603ca23b57fead901068355d28fc787458cdc15ac733ccf
x86_64 aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.x86_64.rpm 54718f0fc15d15c353b50ea0d818147de278d85778a0ab6daa6dc1207abc64e7
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el8_10.x86_64.rpm 5fad58516d28eaa988aeef71f25abb086d2901b27b6ad709c97090773079217d
x86_64 dotnet-hostfxr-8.0-8.0.28-1.el8_10.x86_64.rpm 732f793df6fa4f0214f82e35afe7a2adb9627859d6776df177eff82bb57d95b0
x86_64 dotnet-apphost-pack-8.0-8.0.28-1.el8_10.x86_64.rpm 76d1ad7cadfca720c5a1335290471e35a1501f244ae8c57752d7a4356ea8ef6e
x86_64 aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.x86_64.rpm 78c05a64dab9110809f26665ca452076459a74c89d7637382ce2b0e27bf6bbea
x86_64 dotnet-templates-8.0-8.0.128-1.el8_10.x86_64.rpm 8ffe0d5108a258171ef5135a1d812f3c2870b5bd9f1f4343f552d17407814c7f
x86_64 dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.x86_64.rpm 93ed0b81e6ea30f699d85ecf5ade7366e5b92f022caf8311fd9582e4721dc354
x86_64 aspnetcore-runtime-8.0-8.0.28-1.el8_10.x86_64.rpm 9e428f5028d8a378e6c0119d269085d4da7f9f23c801f7a7b97db68e85de3eab
x86_64 dotnet-targeting-pack-8.0-8.0.28-1.el8_10.x86_64.rpm b38490286d2acebdd60b161d4af4b50dd33d26ec831e0633208ce604655c5475
x86_64 dotnet-sdk-8.0-8.0.128-1.el8_10.x86_64.rpm bea65ff7009627057daf8a9b50b37713f64c778208cb89d6885526e18877ed11
x86_64 dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.x86_64.rpm cc78f14ccdf361f68d86ae10c9129011007671a70e0a07ed3acd1b827e6741a1
x86_64 dotnet-runtime-8.0-8.0.28-1.el8_10.x86_64.rpm fd89f8572343eb51736e56f23b8ba4ebabaf7e36601d580c843c35ebbe9cad8f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.