[ALSA-2026:41901] Important: .NET 8.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-07-31
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.129 and .NET Runtime 8.0.29. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.129 and Runtime 8.0.29 (JIRA:AlmaLinux-192464) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-dbg-8.0-8.0.29-1.el8_10.aarch64.rpm 01b3743925430398ae55e99c219f61b236576a4c2e215868123130662ca7211b
aarch64 aspnetcore-runtime-dbg-8.0-8.0.29-1.el8_10.aarch64.rpm 0bd69be12b8d1d66a51189f63c7ce4f6be57804b3af2f538cb6f5d9d93b2a38a
aarch64 aspnetcore-runtime-8.0-8.0.29-1.el8_10.aarch64.rpm 2bebe189e1c04a0f704c18f9dfedcc5b872561bdf4fc6773fc73a97fbf6a04fd
aarch64 dotnet-apphost-pack-8.0-8.0.29-1.el8_10.aarch64.rpm 41fba50b6df2d96c601e6ea0a6ec7bb94a63dd85f14dc61dfb7a79b8f6b617dc
aarch64 dotnet-templates-8.0-8.0.129-1.el8_10.aarch64.rpm 7327ef619d0c1715be874a5dfdeebdb341fb1be470f1166492bab57d41d81d3d
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el8_10.aarch64.rpm 7969f8de94a6be052ac328358e2ec763948dfe4c8574bb379ab6b99de450dac8
aarch64 dotnet-hostfxr-8.0-8.0.29-1.el8_10.aarch64.rpm 82073d646f752917a925344def5c21cc032e66ba2923688e9d0332f18daa5fb9
aarch64 dotnet-sdk-dbg-8.0-8.0.129-1.el8_10.aarch64.rpm 83c41a0ecfc5bb4b1a643a5e6540bfd5b2a0374019ad180622930d9bbe85c8ac
aarch64 dotnet-runtime-8.0-8.0.29-1.el8_10.aarch64.rpm b7de871a6497a439d6ff08fd650fd0adf01682a3b38c7901c57dbc3dc3db0520
aarch64 dotnet-sdk-8.0-8.0.129-1.el8_10.aarch64.rpm c32a071151ca9f976b5a39ea44d7df2dc28293842f195e1e69b1afbe99f9f6c6
aarch64 dotnet-targeting-pack-8.0-8.0.29-1.el8_10.aarch64.rpm c76ffa3f85df5d5fb380de7c1b8a9b10a3a6a8a734207e2e2a4f0933b5632c92
aarch64 aspnetcore-targeting-pack-8.0-8.0.29-1.el8_10.aarch64.rpm dd04afaf66f3fc84236e1a729bad1bdd9e9a37e47d7acd03134e1fda9f77da82
ppc64le dotnet-hostfxr-8.0-8.0.29-1.el8_10.ppc64le.rpm 21609fbf6a6fb12cb0f78d1080311fa93b9d71f5491c36c4a00b8b5a82d8dbe9
ppc64le dotnet-runtime-dbg-8.0-8.0.29-1.el8_10.ppc64le.rpm 2853d7f2752beb33670a065cf76d6579b021d3b6f6787b2f0e15b14ce9882bc1
ppc64le dotnet-sdk-dbg-8.0-8.0.129-1.el8_10.ppc64le.rpm 2fbfe221e9c06c055891769df6e8e039dfd99b64941223dbf974075bb80ec98f
ppc64le dotnet-sdk-8.0-8.0.129-1.el8_10.ppc64le.rpm 4be7904781fcd675b6d48ee6b4145cbf3f205ecff13de5af47b5d54c88a98741
ppc64le dotnet-apphost-pack-8.0-8.0.29-1.el8_10.ppc64le.rpm 64803556ed844695923578c6cc475fca3a4406820a3b16921d80d9c6ba1f3bfc
ppc64le dotnet-targeting-pack-8.0-8.0.29-1.el8_10.ppc64le.rpm 655fe9a852faf0441d1ba64af5cc4e218f62b6791e455f6ec37139c0e01dbece
ppc64le aspnetcore-targeting-pack-8.0-8.0.29-1.el8_10.ppc64le.rpm 6b0c7e41ca74dd0501cbf18aca5aa3746f242c206802ad0f845da5977b1a29f1
ppc64le aspnetcore-runtime-dbg-8.0-8.0.29-1.el8_10.ppc64le.rpm 7946f5c38012fd018abd77611b8db7e90f4b082044734fdcc07b8e48d6eb6e29
ppc64le dotnet-runtime-8.0-8.0.29-1.el8_10.ppc64le.rpm c1b47ea14fe2269745a053d06080b9b8478a2b860f3a5f468ee27fa4daaf9811
ppc64le dotnet-templates-8.0-8.0.129-1.el8_10.ppc64le.rpm c8c7a1da4c7a8b74c3dea17f62b36625c89a84b9d24e8cab57b009e59c7b1e8a
ppc64le aspnetcore-runtime-8.0-8.0.29-1.el8_10.ppc64le.rpm ee2c58f97f7832660b6bbc92ed38579a3dd5017ea9325dd48a5d92636b3c0633
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el8_10.ppc64le.rpm ef0db197ca2706bd071a2ef0408991f85bb38f47df72cbf2dd7f298a5f523538
s390x dotnet-apphost-pack-8.0-8.0.29-1.el8_10.s390x.rpm 112b5bdf2db7d8c2f83bc2b0c1c85e4d20fdb445e95d53be2144b974af0c8290
s390x dotnet-sdk-dbg-8.0-8.0.129-1.el8_10.s390x.rpm 1507a48d3d3ebbb8430f9f782497e5403495ad91efa20b5c7c2fc51119bc9c6f
s390x dotnet-templates-8.0-8.0.129-1.el8_10.s390x.rpm 1dd7d2402a1f810be6704ee067e0bbf17ff8d12608176666a6e09768dd3c6d7d
s390x dotnet-targeting-pack-8.0-8.0.29-1.el8_10.s390x.rpm 290a7432e8980a4dd362ac9af8065d5bc68c9921b0128a01d13aea9d328174bb
s390x aspnetcore-runtime-8.0-8.0.29-1.el8_10.s390x.rpm 46ab34581915936a2810a7ec0c684b93591c96a44809f2e9c6761938f4a8295d
s390x dotnet-hostfxr-8.0-8.0.29-1.el8_10.s390x.rpm 8b01876d559798d2cee3b37e9718dc1285a7d7995fb1d47a7ae7568dd1ecd918
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el8_10.s390x.rpm bce7d7c0cd38f9813719cd994019091e300d856b39f171e319a808f6c8f0609b
s390x aspnetcore-targeting-pack-8.0-8.0.29-1.el8_10.s390x.rpm be7c1c3e9c37f4ab52a0c91036b36a34578e9d01c63c50685809944567dd0032
s390x dotnet-sdk-8.0-8.0.129-1.el8_10.s390x.rpm cf00970517279f51ae383a79d96977021d20a553e3448630d21d0c7a552d6013
s390x dotnet-runtime-8.0-8.0.29-1.el8_10.s390x.rpm de792bbc9910ffb41b60e0399ccd284a201d529912627a5bc1b592736d0b8ad6
s390x aspnetcore-runtime-dbg-8.0-8.0.29-1.el8_10.s390x.rpm de976563d791b6af8ed99d15153a73f400cafbc140fd42ee005b3f52020fa93d
s390x dotnet-runtime-dbg-8.0-8.0.29-1.el8_10.s390x.rpm f83c94532c223cde27850564391ebe6e09254c141704c88d1d547f0e0aeb245e
x86_64 dotnet-sdk-8.0-8.0.129-1.el8_10.x86_64.rpm 37c04f21ef9af42452d302f2c354baedc9c2c948a0f9cdd07e0049ee3d9fd71a
x86_64 dotnet-runtime-8.0-8.0.29-1.el8_10.x86_64.rpm 426289fae771155644da25bb70b1fe0e16b7b0dfd7c3d60561ffd5adfbcc2e38
x86_64 dotnet-targeting-pack-8.0-8.0.29-1.el8_10.x86_64.rpm 5089603618178d7afda928b5f08900335b4a13b847783c3812336349bcf5b4e9
x86_64 aspnetcore-runtime-8.0-8.0.29-1.el8_10.x86_64.rpm 63b34d330c6b1c54d1f33c66cb5438f47ec655e6caf4f8cfcd6f98a4d7a5b0e7
x86_64 aspnetcore-runtime-dbg-8.0-8.0.29-1.el8_10.x86_64.rpm 8badfa2a17d2c80843f983f570f6fb1d7473e448146e7ba96618bf2cc26494cf
x86_64 aspnetcore-targeting-pack-8.0-8.0.29-1.el8_10.x86_64.rpm b27620929ee8305eb2b306ff64b198747e5206027cbdcbe290017ad070c19aa1
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el8_10.x86_64.rpm c700e8185930f6f89501be7b23e71102cf2cfb8adb51e3b05b2e8f00403fef69
x86_64 dotnet-sdk-dbg-8.0-8.0.129-1.el8_10.x86_64.rpm ca3f40b1235a2e5972a1cb50c0e66022abd0525bd00933f7789af2ec12cb0b54
x86_64 dotnet-runtime-dbg-8.0-8.0.29-1.el8_10.x86_64.rpm d0d5909779751abc38d42e9168c06255bccf02fad553c67781042593ff885635
x86_64 dotnet-hostfxr-8.0-8.0.29-1.el8_10.x86_64.rpm f21240103b04f1ed5842a60e4fd1a64b00c29acb65e55a4f9809b728a4447f41
x86_64 dotnet-templates-8.0-8.0.129-1.el8_10.x86_64.rpm f5beba4c64d90374b8d2dac31909068a544bfbb2df6ba019ffb403299dd88ac7
x86_64 dotnet-apphost-pack-8.0-8.0.29-1.el8_10.x86_64.rpm fd53ca2b9dec75606c9880fafc036ad3adcac363111120663f57ba1dd1d90318
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.