[ALSA-2026:8468] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2026-04-20
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDK_VERSION and .NET Runtime RUNTIME_VERSION.Security Fix(es): * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171) * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203) * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116) * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-sdk-8.0-8.0.126-1.el8_10.aarch64.rpm 04759c00b5aa50548abb8f3f298aa8405289b835166c11c412f0367cd6778c75
aarch64 aspnetcore-runtime-8.0-8.0.26-1.el8_10.aarch64.rpm 1964222148361b5a84a194e78549423ed87297c819be4c00c58ddcabba6e5468
aarch64 dotnet-templates-8.0-8.0.126-1.el8_10.aarch64.rpm 1c60847385ebe65a07a04f8e6148875957fc993e3f10eb0301f41f454ea97239
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el8_10.aarch64.rpm 3dfa747858ca6d6b96ebd19296032e89a6dd492ed3bc7472121af2f368f5ce5b
aarch64 dotnet-sdk-dbg-8.0-8.0.126-1.el8_10.aarch64.rpm 3ee48c2b10233b604c267dd0328bf828cce6cb1bb338bd855789245d4f31a4d0
aarch64 aspnetcore-runtime-dbg-8.0-8.0.26-1.el8_10.aarch64.rpm 7ba63abb0d6599301b9e24108ea23e254b70e1b3eb728e1d96bb63da2a0b4268
aarch64 dotnet-runtime-8.0-8.0.26-1.el8_10.aarch64.rpm 8c96f3380b44bd8598aa2b1b534997175389f3257192928b074b8dd6a90f429e
aarch64 dotnet-runtime-dbg-8.0-8.0.26-1.el8_10.aarch64.rpm a5d1c3be688090fc330a139cb29e5584fee3d1d019bdf0d0ae49760719f0bb48
aarch64 dotnet-hostfxr-8.0-8.0.26-1.el8_10.aarch64.rpm bac66749af24459d0b639bda2bbcf87bf6f36995cedb07e270cd8a1c338ea77a
aarch64 dotnet-targeting-pack-8.0-8.0.26-1.el8_10.aarch64.rpm c4970d966f313447573310581b8b6a740cdb2f6af04a0f8f7f74a160de7808ca
aarch64 aspnetcore-targeting-pack-8.0-8.0.26-1.el8_10.aarch64.rpm d756c625f259e0f1fe70d3c17beb7a1e7e5965d2dae6c12e57877e76dffe04fe
aarch64 dotnet-apphost-pack-8.0-8.0.26-1.el8_10.aarch64.rpm e50035524c9a9878a8b8271095b3ef070352e399d901459c1bb576c9f1bbecc9
ppc64le aspnetcore-runtime-dbg-8.0-8.0.26-1.el8_10.ppc64le.rpm 144dca86e925f892f1410fc2a6ca64bc75b9809d9298713927d92e1f30a2475f
ppc64le dotnet-sdk-8.0-8.0.126-1.el8_10.ppc64le.rpm 32bbf86dfcd81a448bc444106cb74063e7080ae1c28df04aa5f45b06c6e93e51
ppc64le aspnetcore-targeting-pack-8.0-8.0.26-1.el8_10.ppc64le.rpm 49ea9ca652efb2520c6f23d65e583231caf804ddfa9ab9ab7e252a32cfe81cdb
ppc64le dotnet-templates-8.0-8.0.126-1.el8_10.ppc64le.rpm 52ccdc66a718e1352a4663b1df9eafc4977285b047aea906c4198361063c360d
ppc64le dotnet-targeting-pack-8.0-8.0.26-1.el8_10.ppc64le.rpm 531e3b510ae152e0146da8d695a365beaa1e85ec9322290fabefe65d9fd188e9
ppc64le dotnet-runtime-8.0-8.0.26-1.el8_10.ppc64le.rpm 62fe92af61f25bb06fbdba0bee4433502fd5288e4cc2ba5c9274a870454337ba
ppc64le dotnet-apphost-pack-8.0-8.0.26-1.el8_10.ppc64le.rpm 673feda284e731f9dc874d81f88495cf37b871bae8fb4f4c63bb897cc43a58a3
ppc64le dotnet-sdk-dbg-8.0-8.0.126-1.el8_10.ppc64le.rpm 9911778a88b81980e848e7b6bac5c53e22059719257033ed2aeda8660e430549
ppc64le dotnet-runtime-dbg-8.0-8.0.26-1.el8_10.ppc64le.rpm a34e20e1707f597266778b4d50f5c610ac77db4b197e2896445218d6a8112300
ppc64le dotnet-hostfxr-8.0-8.0.26-1.el8_10.ppc64le.rpm b4f271115322fe9267465fd91ee8675fe33c22976e1b8056e1704ffc0a578313
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el8_10.ppc64le.rpm c9c79939a2d9d75029b5acc026ef76bdb8bb29f183de428c4deec5a1842f31fd
ppc64le aspnetcore-runtime-8.0-8.0.26-1.el8_10.ppc64le.rpm dbaffa8c176145dc448280227e69317a7116499128e0bad168684f10720e28fa
s390x aspnetcore-targeting-pack-8.0-8.0.26-1.el8_10.s390x.rpm 05bb4d62bfa8e65eb840cacfb8b913452ca5f010a7f19110459a631e7cba74f8
s390x dotnet-runtime-8.0-8.0.26-1.el8_10.s390x.rpm 18d602bded5b1aab73c5c8548d8b040d563c6fcb3545c18852db35ff91a83662
s390x dotnet-apphost-pack-8.0-8.0.26-1.el8_10.s390x.rpm 26977fe40a9d49926b252041d594b33d9a3e46ec440bf9b8fd4360af6fcc69d0
s390x dotnet-targeting-pack-8.0-8.0.26-1.el8_10.s390x.rpm 4b5565de60134ae3de5eae6a9f5c8c8733b4db1eb15326eddcc8be2fd1932678
s390x dotnet-templates-8.0-8.0.126-1.el8_10.s390x.rpm 5d412c4fa5c11fbdf96d17c843dc4679840541654c55f5cf0f20c84c055b056e
s390x dotnet-sdk-dbg-8.0-8.0.126-1.el8_10.s390x.rpm 91f056b5f26d53ac4dde900a26c9ee2ccfed1493877aa0512ff4c844d9cb17dc
s390x aspnetcore-runtime-dbg-8.0-8.0.26-1.el8_10.s390x.rpm abc5ec81af50a03a4214f8ae0d2077104cfc3b066bc7084d2f9dc0a2e5a556d9
s390x aspnetcore-runtime-8.0-8.0.26-1.el8_10.s390x.rpm b1a6720821b5ced0cf79b5358a469bfcb776169589a2773283949519599d9aa8
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el8_10.s390x.rpm c32a5ed44e5c8a391de2d4ce90a8a1ef597f54ea2049bccc1030aec22faac49a
s390x dotnet-runtime-dbg-8.0-8.0.26-1.el8_10.s390x.rpm c56e1c00ad9ed5d541ef874f257a2b2bde416b34bf51857bc62bc5024a71e142
s390x dotnet-sdk-8.0-8.0.126-1.el8_10.s390x.rpm e042532ed530db0d34e6efca0e1c03882683239fb6d472ccbe2caf9908337ccb
s390x dotnet-hostfxr-8.0-8.0.26-1.el8_10.s390x.rpm fc1688902472fbf1d22d2a7931271b89536f3ad55e9fc626d07090fce64d369f
x86_64 dotnet-apphost-pack-8.0-8.0.26-1.el8_10.x86_64.rpm 3b21080aba226bd62cc913cf833dd6d9edf84d60a8964dd3222020e40de260bb
x86_64 dotnet-sdk-dbg-8.0-8.0.126-1.el8_10.x86_64.rpm 3ccc37ec602a4d203baafba46d13eeb118391b1e27170e46b959d2051fcc4fe2
x86_64 dotnet-runtime-8.0-8.0.26-1.el8_10.x86_64.rpm 43385d36be59828027d29197e35e98ee6d0cc8997e8b11152b134372f0a47dd3
x86_64 aspnetcore-runtime-8.0-8.0.26-1.el8_10.x86_64.rpm 53337507bb8a812a66a8bcc7899531ba481586e9a4660fd80a34127c7e5f335e
x86_64 aspnetcore-targeting-pack-8.0-8.0.26-1.el8_10.x86_64.rpm 538550a3323b32503bd8306a767b89b2a53e326c2432b5c14464d80531186e6c
x86_64 dotnet-templates-8.0-8.0.126-1.el8_10.x86_64.rpm 614eb1723ae27b595b4c08624e6519b95092b820d75b6036d2a315491cbd69a5
x86_64 dotnet-runtime-dbg-8.0-8.0.26-1.el8_10.x86_64.rpm 8eebffc4dd8cfc264f40e23eb216a71012f577815245f6cab45c80bb717dbf95
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el8_10.x86_64.rpm ad6769933eb9fedfb1869d1da3970459016481e3b6e80fcc8fbc06eee2c6503f
x86_64 aspnetcore-runtime-dbg-8.0-8.0.26-1.el8_10.x86_64.rpm c413e6a7d43f07103e4ea541c3808b1361459ccdf9c3f667fb921093dcd9fbe1
x86_64 dotnet-hostfxr-8.0-8.0.26-1.el8_10.x86_64.rpm f42bc10032781dc412154e4e082ee12f88e7f020dc62d650462e3a98c098a757
x86_64 dotnet-sdk-8.0-8.0.126-1.el8_10.x86_64.rpm f485c0c895d00d6926ea23d5eb8124503046aad56e999f2a209c96737f21d862
x86_64 dotnet-targeting-pack-8.0-8.0.26-1.el8_10.x86_64.rpm f8dc3c0c68f28a02d300656dd7b7205e6c3812444f812753078106bc8dcdf4dd
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.