[ALSA-2026:25220] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2026-06-12
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el9_8.aarch64.rpm 012a58cea17c80678b74656572d7a17e72a23fdb9eaa8d78b8811f57625ce934
aarch64 dotnet-apphost-pack-8.0-8.0.28-1.el9_8.aarch64.rpm 32fb8c89b04b3b791bc892178e54183a6669abf8d26be7f0da3d6dd4b6751e46
aarch64 dotnet-targeting-pack-8.0-8.0.28-1.el9_8.aarch64.rpm 347de63136a9d7437677bb642b656c3d98e918305404677b6c073e271b279f0d
aarch64 dotnet-templates-8.0-8.0.128-1.el9_8.aarch64.rpm 36a174f397576a22ea0831e3c3fc96f67de4bdaf3081e08d32a7b57719d66c4b
aarch64 dotnet-hostfxr-8.0-8.0.28-1.el9_8.aarch64.rpm 3ff71101cfa2ca5513bea7f183a5de5cd0f8aafdb9f60956e86b076087131602
aarch64 dotnet-runtime-8.0-8.0.28-1.el9_8.aarch64.rpm 41df75ee48186cf1d54fd4fa4201106505b7b6896fc7fbdf6899c91bffecca10
aarch64 dotnet-sdk-dbg-8.0-8.0.128-1.el9_8.aarch64.rpm 6983c5cd72364c74a2ad512be65e2d985005b606318f1685d5aa095b721eb3f5
aarch64 dotnet-sdk-8.0-8.0.128-1.el9_8.aarch64.rpm 798d27ed645ca1ae6bb4f573047ae8b96fe28f29f88613f64248c00a6ef5295b
aarch64 aspnetcore-runtime-8.0-8.0.28-1.el9_8.aarch64.rpm 8789e2aa2ee128544f31bd426012250a22a5f54bfe2aedf22ba41815237fc664
aarch64 dotnet-runtime-dbg-8.0-8.0.28-1.el9_8.aarch64.rpm 8eedcc7af38a13efbae79aab4354feb909ba91f18cec1e1ad3ebcdd6b4513c34
aarch64 aspnetcore-runtime-dbg-8.0-8.0.28-1.el9_8.aarch64.rpm e2f43e4f933f752cc3f80ca2c7c2d5bae975b2fcae3d654afa3fd77f38fb73e8
aarch64 aspnetcore-targeting-pack-8.0-8.0.28-1.el9_8.aarch64.rpm eb3395a1185892e700cd4ccce4898eb2a0fa78693cc93b26e01ce3830e95b02f
ppc64le aspnetcore-runtime-dbg-8.0-8.0.28-1.el9_8.ppc64le.rpm 1f3fad51c77294a2c3b3dce32d2f57799578c10147b6bb3f3ca31fec297e0310
ppc64le dotnet-runtime-8.0-8.0.28-1.el9_8.ppc64le.rpm 30513ae1dfd484af5fc00ad120fec51a5e71b9a42426735a8914c1dd879f259a
ppc64le dotnet-runtime-dbg-8.0-8.0.28-1.el9_8.ppc64le.rpm 8ad11872408d173e9b4e8728eeb8ef1ac4e54149a83f52f5954de7bee02d29bd
ppc64le dotnet-sdk-dbg-8.0-8.0.128-1.el9_8.ppc64le.rpm 92960b918839afbce28be33aa52403f1fffe1810a25e8da54e5945992a02c4ee
ppc64le dotnet-targeting-pack-8.0-8.0.28-1.el9_8.ppc64le.rpm 9c35790236b208f883ee4ec094aaa278bd9d642aeacfa7961caa6a9b280dfbd8
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el9_8.ppc64le.rpm 9fb76e9196bfbf8c22ad9a4117d16241f9f10f2c3a85d02e66fd0a5542e279c2
ppc64le aspnetcore-targeting-pack-8.0-8.0.28-1.el9_8.ppc64le.rpm a21de99d67eec008f1f3f288ebf43ac8ad8d292c7660666aca6a07f173548d12
ppc64le aspnetcore-runtime-8.0-8.0.28-1.el9_8.ppc64le.rpm a93ac37ae8469be49ef8c03718ef3b72dcb475b08a850e8dc3ed52b9b8b36fd3
ppc64le dotnet-templates-8.0-8.0.128-1.el9_8.ppc64le.rpm bf82914b48d0e39973fc68cddd6222644480f4640021716911589a8cd344a391
ppc64le dotnet-sdk-8.0-8.0.128-1.el9_8.ppc64le.rpm cb987d1e3ef2fddd5eb5ffc68118a014e96e2eb24fd3bb55dfd397cc2d9de282
ppc64le dotnet-apphost-pack-8.0-8.0.28-1.el9_8.ppc64le.rpm f0706f9ae82b0587aeab3dade95c5778d72133bf0416b7d2d7a919b855333ce3
ppc64le dotnet-hostfxr-8.0-8.0.28-1.el9_8.ppc64le.rpm f76fef6233163b93290fbe6673d49ba0c94db72e96229ad368a99d7787fc6f87
s390x dotnet-hostfxr-8.0-8.0.28-1.el9_8.s390x.rpm 236d85579cd28e58dbafe9d383cbdef28cecab9aadd5c81d1049d5729e80e8e9
s390x dotnet-sdk-dbg-8.0-8.0.128-1.el9_8.s390x.rpm 27999af92bf21b122dbd9c0d1f5e6f2dc3e5aff3a383b789353a616b80bfa650
s390x dotnet-templates-8.0-8.0.128-1.el9_8.s390x.rpm 29ab07ff4884ccf33a97fea74b920b59b51411e3ca519aca8f70d18c5b8ef9c2
s390x dotnet-runtime-8.0-8.0.28-1.el9_8.s390x.rpm 3a955d6f5a2aae255b6bea6b2d788d3fb4fe2c24926d15ecacdd614b6d67d1af
s390x dotnet-sdk-8.0-8.0.128-1.el9_8.s390x.rpm 50388043ef6ae79bcdb9e2e754efb2b1bbf784a5d35334a344994170df9d1b49
s390x dotnet-targeting-pack-8.0-8.0.28-1.el9_8.s390x.rpm 5e9cafc627f5049884f2b2a841c820d2d990d8af50413862b4eddbec86411423
s390x aspnetcore-runtime-dbg-8.0-8.0.28-1.el9_8.s390x.rpm 6e48371617c78639ee2367632087981275c1aa0c07768ed1f3eeaf851d4d1c5e
s390x aspnetcore-runtime-8.0-8.0.28-1.el9_8.s390x.rpm 6f8e63913c01b46b47380b993147199d5cd4d6fbd38fd985e7230d58c7b1fc63
s390x aspnetcore-targeting-pack-8.0-8.0.28-1.el9_8.s390x.rpm 833af6da21b0e4d271e4d1590c96f360eede0a3394fc03fb2d14ee387b6aa38a
s390x dotnet-runtime-dbg-8.0-8.0.28-1.el9_8.s390x.rpm 97a37c6c75763ec0e4fd6f9aafe1f7a5571770c084e535a7d62ab2ee8c7e61e2
s390x dotnet-apphost-pack-8.0-8.0.28-1.el9_8.s390x.rpm e9cecb56de578ee122e0343ac8f72c706f678b4de97f39de97bc5ed16b7b5cda
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el9_8.s390x.rpm ec89d95257e76ae80a0aaa014c463a6a3cd96629d3d74045367b0fe1a368658f
x86_64 dotnet-apphost-pack-8.0-8.0.28-1.el9_8.x86_64.rpm 1bb5dcaccb63013bcc0a119d807e74686a29de3979e73d4b2a36f2acce61c0dc
x86_64 dotnet-runtime-dbg-8.0-8.0.28-1.el9_8.x86_64.rpm 33ea4e05cb34afa5641c3e0357059bc63111b44068337a2c43e95dda868e2c9a
x86_64 dotnet-templates-8.0-8.0.128-1.el9_8.x86_64.rpm 3d90669973da5d3c6bb6ad83025a8848ae3b833d029cf0e3b810b21deaddde0c
x86_64 dotnet-targeting-pack-8.0-8.0.28-1.el9_8.x86_64.rpm 49d83ae15341ec8fc338c03121de9650ce3bc96e7859b9c48b4739cf1f29edbb
x86_64 aspnetcore-targeting-pack-8.0-8.0.28-1.el9_8.x86_64.rpm 4e6ef6f5f36bdb7792d09ce0d93b2666326292bf44fcd59e30b51ad9b723779a
x86_64 dotnet-runtime-8.0-8.0.28-1.el9_8.x86_64.rpm 505137bae952448ecc5a6ea76be0afeb434f87d551e29efc51028748b92ed27a
x86_64 dotnet-hostfxr-8.0-8.0.28-1.el9_8.x86_64.rpm 7a2116acdb814b6d257cefd4f5dd6da0cb3a10e86756fe2840f5e780f8db6a46
x86_64 dotnet-sdk-8.0-8.0.128-1.el9_8.x86_64.rpm a94184722523af2e52a86f48bb9bc4d8940f207e915b8090a67a9cf6d0e9c4e4
x86_64 aspnetcore-runtime-8.0-8.0.28-1.el9_8.x86_64.rpm ab34082298d29cfb91defc89c5c0ad33957f2a6b58df9b1e8780dbf01704406d
x86_64 aspnetcore-runtime-dbg-8.0-8.0.28-1.el9_8.x86_64.rpm bfd6d4e8c1df563d85adb81b300f1cbdb98ffef10350ebc43d917537f58bfd0c
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el9_8.x86_64.rpm c21a01cc2cb6d4689c98e627c5262e90d7318c5fca6dd2afa98be81e3d3fb477
x86_64 dotnet-sdk-dbg-8.0-8.0.128-1.el9_8.x86_64.rpm ef57f4657ecf95eb8d5f5444c0398cf452dac0eafcf0751ccb18bf396c81efa3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.