[ALSA-2026:8469] Important: .NET 8.0 security update
Type:
security
Severity:
important
Release date:
2026-04-17
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es): * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171) * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203) * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116) * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7.aarch64.rpm 4df2526253c221ce87c2e443d8d0ed5620afd55e4b37decd37505a4435e90172
aarch64 dotnet-sdk-8.0-8.0.126-1.el9_7.aarch64.rpm 8f03b03c1edf6734c2193c361068a7fd17c8e4e75340ae1b96776f4a061f7696
aarch64 dotnet-templates-8.0-8.0.126-1.el9_7.aarch64.rpm 956cb8ec3b43ad65dcac3f4a2eb530569079f16d3e0dc8bf4684f99d5e8fae51
aarch64 dotnet-runtime-dbg-8.0-8.0.26-1.el9_7.aarch64.rpm 9a36847cad9b474afb978794abf6a5409e6464cd8a773f8181f693d4fe1643b9
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_7.aarch64.rpm 9c5aa2ed4805d166a479d5d3f583a18a395327b3ef707fcaf7c1de5f806e295f
aarch64 dotnet-runtime-8.0-8.0.26-1.el9_7.aarch64.rpm a1163bda18b55bc884ecb0d89256b3d00c00e8ec0490343992b8a7b8c08d928c
aarch64 dotnet-hostfxr-8.0-8.0.26-1.el9_7.aarch64.rpm ae14be2f780d1b3e15682e4441253ba5561f9ccee16424c39e5666410d8c7b0a
aarch64 dotnet-apphost-pack-8.0-8.0.26-1.el9_7.aarch64.rpm b8e4bdca52c754ad0788ad73e879d73ab067257bb6e1952c40e7363d20635927
aarch64 dotnet-targeting-pack-8.0-8.0.26-1.el9_7.aarch64.rpm bcac20bb65afbfd009afe59db9d1a39d49709e6b406e68ab0bd234205fee1311
aarch64 aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7.aarch64.rpm ce71456b6e9bbef092ec6cef87108ad659a812de757d6e347a09a86b0480065e
aarch64 aspnetcore-runtime-8.0-8.0.26-1.el9_7.aarch64.rpm e5e0420390262fe89c9a2baca935b0f5f13cee8e1704efb136df2b8805f1fa8a
aarch64 dotnet-sdk-dbg-8.0-8.0.126-1.el9_7.aarch64.rpm fc81fb16befd36bd02f609d80b98057f1bff3eeff9f18af5a27101a8d2e2dd81
ppc64le aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7.ppc64le.rpm 03b0885b735db48328bc7a98bec6a441c2804ced50e8a3b5ca5caae9aeb7d32e
ppc64le dotnet-targeting-pack-8.0-8.0.26-1.el9_7.ppc64le.rpm 03cda6f9e348db8f0fe8385ec527e6a5d8c81e0a6c9bf25b356dc1d024f84f8a
ppc64le aspnetcore-runtime-8.0-8.0.26-1.el9_7.ppc64le.rpm 188f040caf2c6955b0efb0f93a657158fb391bf549c1b973abae8df3993be268
ppc64le dotnet-apphost-pack-8.0-8.0.26-1.el9_7.ppc64le.rpm 4f7ab2e29e0c177c07b331f6356b1ae71af2eb3ec34978f820d71883aa998dfa
ppc64le aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7.ppc64le.rpm 5ca92009d2555b5cf164b20e3a4b7b764224942c55ba16d050cc40f91f27c523
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_7.ppc64le.rpm 5e7d328e3946a87c258305da9032aae1710998c180c1126edc7918d8e08dba2e
ppc64le dotnet-hostfxr-8.0-8.0.26-1.el9_7.ppc64le.rpm 66c952e588086831f42825b16dd79b5d716a98e20701613ab3264891079bd9a0
ppc64le dotnet-templates-8.0-8.0.126-1.el9_7.ppc64le.rpm 6e8d3d775fd92d1739d1cfd98422c5202a68c8ae9bb714fd3fb13469e6c8f978
ppc64le dotnet-sdk-dbg-8.0-8.0.126-1.el9_7.ppc64le.rpm 93fad4bb3fd8132dfb6e9f7fb440c24e64a2e212ab72bfcc5e7649ec53207d6f
ppc64le dotnet-sdk-8.0-8.0.126-1.el9_7.ppc64le.rpm b851883280344cae5e8eff029b61f4253c31e40ad0454b2e7135daaf907f3ada
ppc64le dotnet-runtime-dbg-8.0-8.0.26-1.el9_7.ppc64le.rpm ed4b7450c931dd7771b6d8c0a53a7bde994506cbbb37189ca4c3d293f382fc9e
ppc64le dotnet-runtime-8.0-8.0.26-1.el9_7.ppc64le.rpm efa362978cb713fff2312407b2c5a871b7f5f85af8d692b5a0c70fad3e97a55d
s390x dotnet-sdk-dbg-8.0-8.0.126-1.el9_7.s390x.rpm 01a0162a059d66cb6cadac2490f14315e71840075de6a66b80c9371dbb01b4f4
s390x aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7.s390x.rpm 373927ad47ce965a748d8d816cebb34a9933cb4ff8df7d574dc7c6b3fcc71429
s390x aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7.s390x.rpm 3eb5257e1b5f78df44fd16732d810a6e5a33238034e61785acff9aea0a151f78
s390x aspnetcore-runtime-8.0-8.0.26-1.el9_7.s390x.rpm 7f5a88b2bce4ec551e04274804bd0513bfc45d9b5c9115de7b2eb602139da178
s390x dotnet-hostfxr-8.0-8.0.26-1.el9_7.s390x.rpm 95c2f4dfbead28cd201b1380e8f684ef315112e5f639d914f90aca5fb0b831df
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_7.s390x.rpm b6dc3e8bc87c57d7758dd1c5f259a144d025eacb099c4bf2f5fcb05597174f2a
s390x dotnet-templates-8.0-8.0.126-1.el9_7.s390x.rpm c047305941c34015305791cd58898f1a6c1b6100f4685fa163e481b5b788a42c
s390x dotnet-targeting-pack-8.0-8.0.26-1.el9_7.s390x.rpm cc0b6afc9eed44ff61deef84480b16be9ebe9309c1267c1268243c28ec4a81be
s390x dotnet-sdk-8.0-8.0.126-1.el9_7.s390x.rpm d083700c1e1f73ddaed8201309b30af7af6470bd7054f92cb444f8fe4f7eadb9
s390x dotnet-apphost-pack-8.0-8.0.26-1.el9_7.s390x.rpm d597e516e3193c8be7ea5fbe1a6c41873079c55a72feeb041437eeeb28165396
s390x dotnet-runtime-8.0-8.0.26-1.el9_7.s390x.rpm e512202a5634c81258d0bb0481b0fedc424c03535a158e19ac1fd620db5cc9f1
s390x dotnet-runtime-dbg-8.0-8.0.26-1.el9_7.s390x.rpm ec4a7d7ae9c692d19198e57469b8a5754d573ad23f5e210a192dcb2c8cbc0632
x86_64 dotnet-runtime-8.0-8.0.26-1.el9_7.x86_64.rpm 28ba439ea13a99ba7a610a254f043d8bac374a7fda48f67665c7d08d4ef83d16
x86_64 dotnet-sdk-8.0-8.0.126-1.el9_7.x86_64.rpm 2e7472376f3c9f4879882c19a354ecc9b289e347c9548a4b59aae1971b24fe81
x86_64 dotnet-sdk-dbg-8.0-8.0.126-1.el9_7.x86_64.rpm 2e949025c7a03dd66c7b827ef8051c36c89155ee92a8e11cc477361932288693
x86_64 dotnet-runtime-dbg-8.0-8.0.26-1.el9_7.x86_64.rpm 4fb6014551120968ee218a46bcae38583a215d01f654c5c714f898b75766e6fb
x86_64 aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7.x86_64.rpm 78526d4734e6779e5b8773e9f1db797c920a6ab62e68a83b062a155ad5261351
x86_64 aspnetcore-runtime-8.0-8.0.26-1.el9_7.x86_64.rpm 785790603384f466704883cb03e3d81aeb5ccbac3b185f27f8e56c24a8bf51f7
x86_64 dotnet-apphost-pack-8.0-8.0.26-1.el9_7.x86_64.rpm b8c232d8cd1de6ed2a3ca810d46a32f59c2ea97014aa77f780b0d56df20aa798
x86_64 dotnet-hostfxr-8.0-8.0.26-1.el9_7.x86_64.rpm ca7b334b6368f52790fcc76b949f313ef7512d1c4772428db7b9b6d34fe9aadd
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_7.x86_64.rpm d17843a663a3d7ce4ac3db538ab02e8bd619930d66cabbe8457fa262d6e16834
x86_64 aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7.x86_64.rpm da3437efbd030acae5adbb02e2e5eee6a0306b224cbc37f9dd006b0967094ec5
x86_64 dotnet-targeting-pack-8.0-8.0.26-1.el9_7.x86_64.rpm f0c42c98ccfb758c8a5504c2fb9ed88190bc915a16c22365a92dc4b939f04359
x86_64 dotnet-templates-8.0-8.0.126-1.el9_7.x86_64.rpm f25b78d01de7c8524f2cc609e38c94f30bdcb7ea8371c7c4fd419b4167e48f12
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.