[ALSA-2026:21293] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2026-05-28
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es): * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043) * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_8.aarch64.rpm 1df6fdbc2ef438a7b4f13f00a2d212a4cbb27a7cfce25762c806ac597b7efb2d
aarch64 dotnet-templates-8.0-8.0.127-1.el9_8.aarch64.rpm 3fcc7d89fd817b85e33bf5cc7c51c163ea0ba6d181f3ae4000d69db9261ef6ae
aarch64 dotnet-sdk-8.0-8.0.127-1.el9_8.aarch64.rpm 5658dfb468810959dba966a6aa1fdbe3479e402393d59c89d70fa848813d0a83
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el9_8.aarch64.rpm 70a409f3eb580539736b522886bbdabefa1bb8ec8b88384a2bd58c9371bfd79f
aarch64 dotnet-hostfxr-8.0-8.0.27-1.el9_8.aarch64.rpm 7af983fd17d34b04f31d8cf9a7d4840eebab89d05632300249e08117b5ad1cb0
aarch64 aspnetcore-runtime-8.0-8.0.27-1.el9_8.aarch64.rpm 87a9960c68b721aaad5d5aab7b16c0e56cb0cf3718b07ecab835051333e3604e
aarch64 dotnet-targeting-pack-8.0-8.0.27-1.el9_8.aarch64.rpm 8c2e6a43a31d70d4ab3f4098f18fb43b6eceacdb8a140f6bd2006331d6bf3585
aarch64 dotnet-sdk-dbg-8.0-8.0.127-1.el9_8.aarch64.rpm a46a9c5fadd1866ea999c16bc808a11b48753fcce0423c4815f8b7e93b8a4e76
aarch64 dotnet-apphost-pack-8.0-8.0.27-1.el9_8.aarch64.rpm b5f3f3bce6b8e6b2215f35a89c297cc94b7c9fd1d169738c5b5d2c08932780e8
aarch64 dotnet-runtime-dbg-8.0-8.0.27-1.el9_8.aarch64.rpm d3a141e0e003972fa6b0dbf63dd7577b51e5c6b78bf14cf0445eaa4f7c5a775f
aarch64 aspnetcore-targeting-pack-8.0-8.0.27-1.el9_8.aarch64.rpm dc3979bd0e10b47b57d9936e072a213326d088da3f5098514011e8137d051322
aarch64 dotnet-runtime-8.0-8.0.27-1.el9_8.aarch64.rpm e845193dd2a7b7b2d37eae5b2a07cae7fa2d236949ec7655329e5df829204500
ppc64le dotnet-sdk-8.0-8.0.127-1.el9_8.ppc64le.rpm 093c38a9aead1d9bb575b0fe43329a009d00913f9333a20a0f2b54f3713ea90e
ppc64le dotnet-runtime-8.0-8.0.27-1.el9_8.ppc64le.rpm 0df9e305537fbae9d456415cb77596f44a3e5858672f1a46032d199fb6b26cde
ppc64le aspnetcore-runtime-8.0-8.0.27-1.el9_8.ppc64le.rpm 4c9b75dfea93d4c936cd353b981a4a292a9896a7361d2d7a7d418f3505ed14d9
ppc64le aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_8.ppc64le.rpm 54ac7783bd1cc5d58d71d665cd175f1601da1329aa391fd0d40ff7baa829f12f
ppc64le dotnet-targeting-pack-8.0-8.0.27-1.el9_8.ppc64le.rpm 6d3df8d8392bee56b8aa3496ab69447505bba81d9b9a6da3be7e710e372086ac
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el9_8.ppc64le.rpm 75c78f8c586cc7b99ffd1bc61317647bec7f17da74a535a0ece95ac90b0870ed
ppc64le dotnet-runtime-dbg-8.0-8.0.27-1.el9_8.ppc64le.rpm 778b3c48148b6be024277d35e4d137cdb5e89858783a31e43b13342a98beb70d
ppc64le dotnet-apphost-pack-8.0-8.0.27-1.el9_8.ppc64le.rpm 8488787c961a44fbb2c5ac3dc280023393cd85e9c0f06a3cd124ae2f6df56371
ppc64le dotnet-hostfxr-8.0-8.0.27-1.el9_8.ppc64le.rpm a7577be3f7d9d04a28c203fc577ed00a50fa864b7f294976e5ab63630c7ca385
ppc64le aspnetcore-targeting-pack-8.0-8.0.27-1.el9_8.ppc64le.rpm c44e7e114f56a0f32c27a22fb89a2c386cc5fdd8b473c89fd268a0acb64d4a52
ppc64le dotnet-templates-8.0-8.0.127-1.el9_8.ppc64le.rpm cb11610764021bc002576f3ed3c1be96f441b36b593f8b208a8e80c22090c98e
ppc64le dotnet-sdk-dbg-8.0-8.0.127-1.el9_8.ppc64le.rpm f026051cf56c90671e6a86b2d100cdea96b64d83fa7b2560ee929d45e8e5e42e
s390x dotnet-runtime-dbg-8.0-8.0.27-1.el9_8.s390x.rpm 5b309893498e27b9fcaf8104d70cf4b74730145dd2f39acf25f8ac9f75305277
s390x aspnetcore-runtime-8.0-8.0.27-1.el9_8.s390x.rpm 824fe62c93790ab2b6851b787fed40719f8bf358354b9e8d0bb113e93d4df9bb
s390x dotnet-apphost-pack-8.0-8.0.27-1.el9_8.s390x.rpm 951752a5919bdb5692a3503ee6d8477f1a726543df1945fcca21e08cf22828da
s390x dotnet-sdk-8.0-8.0.127-1.el9_8.s390x.rpm b2127b95f9e096186808ee5be9c42af252270fa0c3ca70ade123ceb02e8b7249
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el9_8.s390x.rpm bc8783a6b011c507baf3da14de2e59eab2e1939bace955b6a8e1703a836b2483
s390x dotnet-runtime-8.0-8.0.27-1.el9_8.s390x.rpm cb80bc30bbd59d9c33016a235b86aab589841d3da9be9a6d0f8ed8a7e1034f8f
s390x aspnetcore-targeting-pack-8.0-8.0.27-1.el9_8.s390x.rpm ce5b05d437c90f8153fe554bee9d9c40676d281a67a46a36f82299caff9aabed
s390x aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_8.s390x.rpm de884c70cdb4f862903b5e3d4231b8810e920a640adc423bb5a7e2242a5e6e74
s390x dotnet-sdk-dbg-8.0-8.0.127-1.el9_8.s390x.rpm dea2ae91da6b423383c2924ad70b1993564365182de091a804037dfc4ef53df5
s390x dotnet-targeting-pack-8.0-8.0.27-1.el9_8.s390x.rpm f704b4c117d892cd8a9ffad832854965d9cf41c59e4d797d5be6a2b1d5b2f13a
s390x dotnet-hostfxr-8.0-8.0.27-1.el9_8.s390x.rpm f9374536e0c9742d2f678fed64de6ea2f3ba4dd9cab50c11fabac6cda0391ee1
s390x dotnet-templates-8.0-8.0.127-1.el9_8.s390x.rpm ffd9f3b6515b35240bfbdec54dbace588494911e5db8a0801dd240f80f167a3b
x86_64 aspnetcore-targeting-pack-8.0-8.0.27-1.el9_8.x86_64.rpm 263fb5f84814118b9e8307a2f2505135dc774acb880bc15d321852561345ed31
x86_64 aspnetcore-runtime-8.0-8.0.27-1.el9_8.x86_64.rpm 2c265b4fcac16bbe1468fd830a4d3d87ac7695b24a92d0107fd4df45eab5865f
x86_64 dotnet-apphost-pack-8.0-8.0.27-1.el9_8.x86_64.rpm 4740ff6127f1e0a7c5cc1c7f448345b424bd58b8dce9e8933e88f922cdafc259
x86_64 dotnet-sdk-8.0-8.0.127-1.el9_8.x86_64.rpm 62bc55d185b9391424fca8a5487f70d765186d5fa116ee78f655be9556520362
x86_64 dotnet-runtime-dbg-8.0-8.0.27-1.el9_8.x86_64.rpm 789a50d5467128fcd720878e06d753ca07e7f5410b92c7c7b36cc87aa1e4e45f
x86_64 dotnet-runtime-8.0-8.0.27-1.el9_8.x86_64.rpm 9ef0045a008c6ce02cc7739d8966108ebbaa03453a8e5144cc27a137c5282e79
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el9_8.x86_64.rpm af473344d68cc3ecfb2ab7341598a75fc0339007474b089d88aab87e1a4974b5
x86_64 dotnet-targeting-pack-8.0-8.0.27-1.el9_8.x86_64.rpm ba587263f1478d003c01732f616f44a2075f6f0670b0c781894b7dda63a5732f
x86_64 dotnet-templates-8.0-8.0.127-1.el9_8.x86_64.rpm bee99bf036b3187fa5e8d360463b3de371e00a212d01ac029025be6161549eba
x86_64 dotnet-sdk-dbg-8.0-8.0.127-1.el9_8.x86_64.rpm dbdbe9d6ffe40e0d8c0c816ce7f61be5b37d3a40ca1928bc08e5f1fe5c1d3249
x86_64 aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_8.x86_64.rpm f94c44c66f98ffc04437cb04373778a76247c6d13f1d747f13af5d83cfaf0a39
x86_64 dotnet-hostfxr-8.0-8.0.27-1.el9_8.x86_64.rpm fe1a32503d264cbb0d85053e195fdd1b2d4ae7791ec3b265752bdb8d3381fecb
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.