[ALSA-2026:92420] Important: .NET 8.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-10-31
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.133 Runtime version: 8.0.33 Security Fix(es): * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 (JIRA:RHEL-291714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-dbg-8.0-8.0.33-1.el8_10.aarch64.rpm 54cd3abc5c75bc7db8daea092a727c1e973d63346a732038998b9121657c94a6
aarch64 dotnet-templates-8.0-8.0.133-1.el8_10.aarch64.rpm 581052a2ed806bdb50f644b8521cc08641e95043985953ce3ad3c43e40fdf6fd
aarch64 dotnet-apphost-pack-8.0-8.0.33-1.el8_10.aarch64.rpm 640d6939dce26ea1a60d2b74bfa8119775510a7cc301c4271da5318629c4ffd9
aarch64 aspnetcore-runtime-8.0-8.0.33-1.el8_10.aarch64.rpm 6c7bd7796811a0f9cf0041ac1aa54e4addc2b9c895c38928ae32d83894c5ff8a
aarch64 dotnet-sdk-8.0-8.0.133-1.el8_10.aarch64.rpm 7c42bddf538e79f11f746a74d7a9e5d133c33f56ba01f835bc4a7de74044fcb8
aarch64 dotnet-runtime-8.0-8.0.33-1.el8_10.aarch64.rpm 91d1c2379de2a12092858386160ba17393fa90b2a1c01af32e0e8030eb437672
aarch64 aspnetcore-runtime-dbg-8.0-8.0.33-1.el8_10.aarch64.rpm 92fcd59fdfa48879c83497d37e533c3e44e1c25a229d030289748976362e2cef
aarch64 dotnet-targeting-pack-8.0-8.0.33-1.el8_10.aarch64.rpm a37b6f81792bf022a39a6de953b930fd37e8d2f3e2f09f98fe7c0afa9eaa4823
aarch64 aspnetcore-targeting-pack-8.0-8.0.33-1.el8_10.aarch64.rpm ab644611ca0ad576dab6895c449050f3ed18918af40da0440e0abe5b0c94351d
aarch64 dotnet-sdk-dbg-8.0-8.0.133-1.el8_10.aarch64.rpm b9744ddc634b84e3acf9e93e133a5737072b05497a46fc09b1c782d669c30551
aarch64 dotnet-hostfxr-8.0-8.0.33-1.el8_10.aarch64.rpm cf730d7da78157e01ceaba5bcc3ceac26c5e4af1f668c116c256c1a1f3c8264d
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.133-1.el8_10.aarch64.rpm d107e3e5155b8fb1260c0f4a708389df13f8e1399c81c07ef08950ce759e4bdc
ppc64le aspnetcore-runtime-8.0-8.0.33-1.el8_10.ppc64le.rpm 09ab24480d28d9301075a5605d62c26d8c95e8a831bdc7829e77a86b78835863
ppc64le dotnet-templates-8.0-8.0.133-1.el8_10.ppc64le.rpm 09d0cb91b4d22d008a10bb13b287a139056f49cba925d5c4e92c8f8f1d4b9526
ppc64le dotnet-runtime-8.0-8.0.33-1.el8_10.ppc64le.rpm 14519d83a09b68fbe9025e0369544fa6da12fa64b372a2907098924c2c617888
ppc64le dotnet-targeting-pack-8.0-8.0.33-1.el8_10.ppc64le.rpm 25877c258b606afe7dbd0220f029e4c303dc65718efbb8fb5a6215bb2857bdb7
ppc64le dotnet-apphost-pack-8.0-8.0.33-1.el8_10.ppc64le.rpm 37427d53781aa3a0a4d55cbd7b7db6e712e74c2c3c08aa553d6796d7a93dcf91
ppc64le dotnet-sdk-dbg-8.0-8.0.133-1.el8_10.ppc64le.rpm 759140a73aacd5d1dea79a8e99504a49fa9d1dc6478d22ce9aac427b0015a416
ppc64le dotnet-hostfxr-8.0-8.0.33-1.el8_10.ppc64le.rpm 76496520a8eeed3928d8ce25985bf1495ccbe8adb739145e0a1f67db8adc0c6b
ppc64le aspnetcore-runtime-dbg-8.0-8.0.33-1.el8_10.ppc64le.rpm 9d6bf031792ee9db68ee441a06a01f7bde007c0d425880707549a6e0f5d36208
ppc64le aspnetcore-targeting-pack-8.0-8.0.33-1.el8_10.ppc64le.rpm a34e914f3bd3dc1e11c131fa1347ee74680b5b54109b470ee8deaffb43c2827f
ppc64le dotnet-runtime-dbg-8.0-8.0.33-1.el8_10.ppc64le.rpm b7112c29eb6528f955ec46599449978c5d2b8f493bd743fb22ab1a3c9a2dd9fc
ppc64le dotnet-sdk-8.0-8.0.133-1.el8_10.ppc64le.rpm bc8239321dff244f82f2a6587561555ef7a49b1f03375536e0b47da903881fee
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.133-1.el8_10.ppc64le.rpm d0561e033d73f6be1cdbd4a36f4cee85a32cf387e6bee49c96daa6359c91dd90
s390x dotnet-runtime-8.0-8.0.33-1.el8_10.s390x.rpm 0dfcbd8927a20959097f73899c26a2a95ab9d7707830a60f4b3f5fe322ff36b9
s390x dotnet-sdk-dbg-8.0-8.0.133-1.el8_10.s390x.rpm 10bf6d6b12491d7632f27539b90471bc256b60c99d346b36a85a929fda632df6
s390x dotnet-apphost-pack-8.0-8.0.33-1.el8_10.s390x.rpm 2bf5e3a0f25e21ed3d4ddcdacb2c2bc7b6338cf372f8f33e656913de0a7ff5c1
s390x dotnet-hostfxr-8.0-8.0.33-1.el8_10.s390x.rpm 44d0d0ffdda20d727e461ebe89d2f71befbb667c1507bbad6964b666020bd80d
s390x aspnetcore-runtime-8.0-8.0.33-1.el8_10.s390x.rpm 547b90875593869e22aa70facdafa475023285d56ef0801d1ca2faa003220aba
s390x aspnetcore-runtime-dbg-8.0-8.0.33-1.el8_10.s390x.rpm 74b6e08da4a21988b83804b9969f0cd06bcc98e2c83c628cb2ff1967d779b7ed
s390x dotnet-runtime-dbg-8.0-8.0.33-1.el8_10.s390x.rpm 819dceb5e6c48b0e7f591233bcb5c870aba6c3f73241d169b788d3c4f0fc8f21
s390x dotnet-sdk-8.0-8.0.133-1.el8_10.s390x.rpm 9420c3ab6b5aaf25c3c8a4a3aa9ae11b5ddac71dbd2ba9893f28168d18af8e31
s390x dotnet-targeting-pack-8.0-8.0.33-1.el8_10.s390x.rpm ccc4a277cdabf6b7cec37c934910e225d6ed6b91c80356d61450e23befce5eb7
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.133-1.el8_10.s390x.rpm d2d9c2358dca31e7cc253e3986ae5c16114086438d8ac8456ad0d93f1cf19f1c
s390x dotnet-templates-8.0-8.0.133-1.el8_10.s390x.rpm e03d88dd3afff96af44fa01a70dabc7da5f354d531bd81046c8c47f870e668ad
s390x aspnetcore-targeting-pack-8.0-8.0.33-1.el8_10.s390x.rpm ff91756e5c8057231fd33ab24789ae0f39b7b4225cd9a2633d7d53acb9bbb12f
x86_64 dotnet-runtime-dbg-8.0-8.0.33-1.el8_10.x86_64.rpm 0e44510cf80f052a0cdca17279939adb955f19327abefadebc3d1cfd1fe62ca8
x86_64 dotnet-runtime-8.0-8.0.33-1.el8_10.x86_64.rpm 22ca9b1cbad247b48ce8b4d0d99fe7e96d6a79913f64e91af1332eaaf8b52f97
x86_64 aspnetcore-runtime-dbg-8.0-8.0.33-1.el8_10.x86_64.rpm 3063949b7ee1d40bd639bdde8a7e8118372976fd2d616201c20a454b67040c08
x86_64 dotnet-sdk-dbg-8.0-8.0.133-1.el8_10.x86_64.rpm 4ca220d58a87f21ecb32dac8fa88440a7490eae070d1f4ae5915358141a83621
x86_64 dotnet-apphost-pack-8.0-8.0.33-1.el8_10.x86_64.rpm 56f9288d310d22422512859c28ea8795063f3f9cfb95599f3a712fc45ef05c33
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.133-1.el8_10.x86_64.rpm 68a573455e9641ec5339172fb43088a213c92e165805f1c6109269ee0dcaafa9
x86_64 dotnet-templates-8.0-8.0.133-1.el8_10.x86_64.rpm 89b569216e37d6c6e5cdc08b029050db99678d19ae45fc91b3a425a11f47875e
x86_64 dotnet-hostfxr-8.0-8.0.33-1.el8_10.x86_64.rpm 9c403eb0a79a0f7ac4c18db0e44b91e792c6b2d41b6e968dd939f6bf91baf2d5
x86_64 dotnet-targeting-pack-8.0-8.0.33-1.el8_10.x86_64.rpm d51fc7307789e06237b8b3395754dc7c7c5c11b1495b8779e5fb03e7ee678887
x86_64 aspnetcore-runtime-8.0-8.0.33-1.el8_10.x86_64.rpm eb7bb9afd3357cd31071db6c6b1d38b016d5f5602634b596f71f22b09dd9631c
x86_64 dotnet-sdk-8.0-8.0.133-1.el8_10.x86_64.rpm f29c1f85b59e25f0577e921928bbd3d07c9927b629a0462723030fd42e44ae03
x86_64 aspnetcore-targeting-pack-8.0-8.0.33-1.el8_10.x86_64.rpm fb56d9aa5b8d0288c355e65dc969b0b9a1a436823e4535bf609a86957fdb35a4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.