[ALSA-2026:99052] Important: .NET 8.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-11-12
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.134 Runtime version: 8.0.34 Security Fix(es): * dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-109478) * dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476) * dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544) * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475) * dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146) * dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147) * dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.134 and Runtime 8.0.34 (JIRA:RHEL-302533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-targeting-pack-8.0-8.0.34-1.el8_10.aarch64.rpm 15dedc6b285c858d73a527cf60292c05d49c62861fb740f37e2b013eecc8c8e8
aarch64 dotnet-sdk-dbg-8.0-8.0.134-1.el8_10.aarch64.rpm 2cfb5b09dfae95f4c65be003efd866cef1ff5f98da771f0c2884f07e3d65c45b
aarch64 dotnet-hostfxr-8.0-8.0.34-1.el8_10.aarch64.rpm 310d44e07002a048ec15cdebb371c38d4ca5717527b6a7fccfa379ca7c3d6c97
aarch64 aspnetcore-runtime-8.0-8.0.34-1.el8_10.aarch64.rpm 378d7689210205c470013e6f2da0e5071ef0d39c729eb9aa9bcbfee298a9056d
aarch64 dotnet-runtime-dbg-8.0-8.0.34-1.el8_10.aarch64.rpm 42a84cf1aeaec2126d507dff112409c8b11541bf09e92171a8cbff120f6dece5
aarch64 dotnet-runtime-8.0-8.0.34-1.el8_10.aarch64.rpm 58b0e04e2c2a5abce4edf00c9b7b3488d8e4af28be22091b489e5c7b267987c1
aarch64 dotnet-templates-8.0-8.0.134-1.el8_10.aarch64.rpm 73255fd8c12b3699d83e398cf84e4e93c1cdd8222f8dc116079bccce7e3d408e
aarch64 aspnetcore-targeting-pack-8.0-8.0.34-1.el8_10.aarch64.rpm 9494816c4ddf3cd2b9e59a29a3884edb9a52a38c368fef400a7650b4c432c544
aarch64 dotnet-apphost-pack-8.0-8.0.34-1.el8_10.aarch64.rpm a4d2d249c6cb60f4984c62ff51ecc69a725a3a93ebb3f81b4250b218ca2b88d4
aarch64 dotnet-sdk-8.0-8.0.134-1.el8_10.aarch64.rpm c2838a12d63aeec2867ff8139764bc13a822e1fff5cccb915e55dee38e648a54
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.134-1.el8_10.aarch64.rpm dfb86043dcb6807a5dec3b23c9b99238b11996a3c68d59a5f34ad9d8b082a695
aarch64 aspnetcore-runtime-dbg-8.0-8.0.34-1.el8_10.aarch64.rpm eb8b5f37ded4ba7b353e84efaea89343f77697e6a2f43871bc22e55064fd2ec7
ppc64le dotnet-sdk-dbg-8.0-8.0.134-1.el8_10.ppc64le.rpm 08b6982611636f09425bbe39414247f91ce34ec8c0e30a04c29d651a77d1194c
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.134-1.el8_10.ppc64le.rpm 1f57a4087ee4088d11a0a499f9414cf1e7f446af7df3fb5b2efa80ce39ed742f
ppc64le aspnetcore-targeting-pack-8.0-8.0.34-1.el8_10.ppc64le.rpm 30e96f5edcc1bea66e996084f28e0189d647bc4f3accd3a477d2f92793f34c48
ppc64le dotnet-templates-8.0-8.0.134-1.el8_10.ppc64le.rpm 3216ac8b05f6bc4181ee193f99f9d218debaebf128e84e6b50e8c2f0cee01f6a
ppc64le dotnet-targeting-pack-8.0-8.0.34-1.el8_10.ppc64le.rpm 40087f8dfd2b732c142398e30466a32a4b0d1b1a3a37085aeaeca5a03900a62b
ppc64le aspnetcore-runtime-dbg-8.0-8.0.34-1.el8_10.ppc64le.rpm 79d875327358b6b42386cd394e7c2f1412520c4fb3be1a83442fc7643643b163
ppc64le dotnet-apphost-pack-8.0-8.0.34-1.el8_10.ppc64le.rpm 85afa8c2d17b4c7d5de41ec49b6789d932cd20479ce3af83a5f97bec5e2dc8ec
ppc64le dotnet-hostfxr-8.0-8.0.34-1.el8_10.ppc64le.rpm 913b579d983e15b74ca5b23c586ad7236cafc686f1117953911aa48bb386d1f6
ppc64le aspnetcore-runtime-8.0-8.0.34-1.el8_10.ppc64le.rpm c909c9dafae7d52bacece79222b206107c19fb59b8d950781422cbc877a03235
ppc64le dotnet-sdk-8.0-8.0.134-1.el8_10.ppc64le.rpm d05b97073f38d6d2142771f6edaa6380c5e485f47cdc2fdad7a3347eeede1653
ppc64le dotnet-runtime-dbg-8.0-8.0.34-1.el8_10.ppc64le.rpm d639a80ec8620196f0f777d5b01173c6a9c889b3c3a24a7c03a44c8ee604c29b
ppc64le dotnet-runtime-8.0-8.0.34-1.el8_10.ppc64le.rpm d647e7684e64372ab4796e56ccbc8ffcf0d98fc667844574e668e6e6af384b64
s390x dotnet-targeting-pack-8.0-8.0.34-1.el8_10.s390x.rpm 042921bc571407e04dc6b6323ae665e7694adfd4d1da6965f4b7b420189b4cd8
s390x dotnet-sdk-dbg-8.0-8.0.134-1.el8_10.s390x.rpm 188a29e90311aee5e4bb52abfe908ebf6a1736521f70bfa17b73b1a2c70ea4e5
s390x aspnetcore-runtime-8.0-8.0.34-1.el8_10.s390x.rpm 29e74e799ac2e100cb505e4a7fde2cd1af51848cf50b8cc7590775341087cab6
s390x dotnet-templates-8.0-8.0.134-1.el8_10.s390x.rpm 3737244f9b8f216ce4c62d2c0433be72724a786b1d6f45b9a84d40a231021c92
s390x dotnet-sdk-8.0-8.0.134-1.el8_10.s390x.rpm 689cf9dfdd882493f89483998e704461abe177e879f45140e6f6f542c4de7d78
s390x dotnet-runtime-dbg-8.0-8.0.34-1.el8_10.s390x.rpm 6f0b764094847a9ddca14db56dd06892798ac6aef945e1720c0497516a7e4892
s390x aspnetcore-targeting-pack-8.0-8.0.34-1.el8_10.s390x.rpm 79399b86ea9e4052460f3ea36180f14361e4316ce51f16703a6d299d0f6ac386
s390x dotnet-apphost-pack-8.0-8.0.34-1.el8_10.s390x.rpm 8c62bf58372395a5a9380ea9662aeabcaf7fec256c34c7ba3424d76e83fce290
s390x aspnetcore-runtime-dbg-8.0-8.0.34-1.el8_10.s390x.rpm 99e193a065fd162b8842b66d85f35f3d695b34c4bf13662d60201c5c913722ec
s390x dotnet-hostfxr-8.0-8.0.34-1.el8_10.s390x.rpm 9d2408fc8eb92dfc896687d3ce3856e35527401c0d8ac3007f54b9c334c7893b
s390x dotnet-runtime-8.0-8.0.34-1.el8_10.s390x.rpm a09b788f94fa2390a98708972a4786216fda009a7df995994dce5f4d93dc3ce2
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.134-1.el8_10.s390x.rpm f74281244b3ac79eb0ff0bcc99737ad23e3dc5907355076991ff022d0f0750fa
x86_64 aspnetcore-runtime-dbg-8.0-8.0.34-1.el8_10.x86_64.rpm 08ede47754a9c55ae7296b060cc4787e9df1e4c2c93fb05f52d6422da7444b18
x86_64 dotnet-runtime-dbg-8.0-8.0.34-1.el8_10.x86_64.rpm 3c3cf7b6ab57ac9d6f4c8ca46b089b3c4dd67358a673f5f35e3cd2bca17c6346
x86_64 dotnet-apphost-pack-8.0-8.0.34-1.el8_10.x86_64.rpm 66221e235b933b8fd429f201989fb0aa4692902df277d88bb912bbcef035e024
x86_64 dotnet-targeting-pack-8.0-8.0.34-1.el8_10.x86_64.rpm 757e114712e638b49924742ed92315daa5f5bd0cf572328fee82d3557820c372
x86_64 dotnet-sdk-8.0-8.0.134-1.el8_10.x86_64.rpm 84b68190461d78d9f27d228eb618a29df85604e09385ddf958d4f3de3d3f2165
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.134-1.el8_10.x86_64.rpm 879001510ab84e2e79251a6ca385c62b468b96a0519b7203626fb0f766f1fee8
x86_64 aspnetcore-targeting-pack-8.0-8.0.34-1.el8_10.x86_64.rpm 92e96080be4fccd329628a593dd0dcb40125fcaedb3f0c081091ec6ee3cd415b
x86_64 dotnet-templates-8.0-8.0.134-1.el8_10.x86_64.rpm 9cea4d7ba190a246f4644dac6064d56e0530afb984ea73ba49dca79fb96736a5
x86_64 dotnet-sdk-dbg-8.0-8.0.134-1.el8_10.x86_64.rpm eb45404a5e8079aa3ec7b5f9cc8cea70d8ec34cdd7264dfbfa1010e3889098a1
x86_64 dotnet-runtime-8.0-8.0.34-1.el8_10.x86_64.rpm ee69528ef0028d4f247daddbe572e0893595627d4abf3dfe428c00e81f6861f8
x86_64 aspnetcore-runtime-8.0-8.0.34-1.el8_10.x86_64.rpm f8fe72a28acfdd4c4b7e0e644b76ba6270f92affb505ef8d2ce21e5e4c6ab362
x86_64 dotnet-hostfxr-8.0-8.0.34-1.el8_10.x86_64.rpm fd0efd16c3b7c79480577e0b4001e05d1a16e7bf781c411f04dc766514db8feb
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.