[ALSA-2026:86169] Critical: .NET 8.0 security, bug fix, and enhancement update
Type:
security
Severity:
critical
Release date:
2026-10-21
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 8.0.132 Runtime version: 8.0.32 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822) * dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651) * dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175) * dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183) * dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186) * dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188) * dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196) * dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092) * dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707) * dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability (CVE-2026-96222) * dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225) * dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230) * dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231) * dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233) * dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236) * dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237) * dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238) Bug Fix(es) and Enhancement(s): * Update .NET 8.0 to SDK 8.0.132 and Runtime 8.0.32 [almalinux-9.8.z] (JIRA:AlmaLinux-277793) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-sdk-dbg-8.0-8.0.132-1.el9_8.aarch64.rpm 10eea3eb1821702340c8544ff9e79144b5a3d34661a866f40e0f7bf60d4b3751
aarch64 dotnet-hostfxr-8.0-8.0.32-1.el9_8.aarch64.rpm 17da5ce74600f8da8bfa1b7f3a07a664f33ebb638d3a78d0c19c6ac5c783c6d9
aarch64 dotnet-sdk-8.0-8.0.132-1.el9_8.aarch64.rpm 3696d292844484d5308eae08717539ac4df4b091e9665de8161e5b65cfba45e3
aarch64 dotnet-sdk-8.0-source-built-artifacts-8.0.132-1.el9_8.aarch64.rpm 407b166116804c6b0bdc258211ddddffcad849f0d1deee056f357b0b596bed75
aarch64 dotnet-targeting-pack-8.0-8.0.32-1.el9_8.aarch64.rpm 76859a511fd66b6cf02963cf92632390b7c2dd0fc9d23d94bd3f54f87d2f1159
aarch64 aspnetcore-runtime-dbg-8.0-8.0.32-1.el9_8.aarch64.rpm 9692bed51d889354df052d7577aa1fa6a158cea3594f880ccc9ef387aca85a78
aarch64 dotnet-apphost-pack-8.0-8.0.32-1.el9_8.aarch64.rpm a1c8c73edef02a20082d5b30173384fbfc75db9dad0b8264b46e137c63190df8
aarch64 aspnetcore-runtime-8.0-8.0.32-1.el9_8.aarch64.rpm b074064decf5dbc2e00e965abd5d7bb6c7482fc53c92f683e5cb4787dcf2995f
aarch64 dotnet-runtime-dbg-8.0-8.0.32-1.el9_8.aarch64.rpm c0a6b8f046cd07358ed7c84ea838b24eb4447c55302ca4cc06c1d91b679f6b67
aarch64 dotnet-templates-8.0-8.0.132-1.el9_8.aarch64.rpm ce6bbaea27051fd735a42fee68a410e7113af6ba4c138dcf0e3e95d948ded072
aarch64 dotnet-runtime-8.0-8.0.32-1.el9_8.aarch64.rpm e8b1f9815b8e42c876de22eec49adaee4db441ca5c534712aefe1d90eed3f2b8
aarch64 aspnetcore-targeting-pack-8.0-8.0.32-1.el9_8.aarch64.rpm fb6958d0091e295291d7dd167b79c755d701c84c4a4ce944948828f89e91f81f
ppc64le dotnet-runtime-dbg-8.0-8.0.32-1.el9_8.ppc64le.rpm 050d62d18b2867e9bc99fa090c277b68c44ed5b433e9f5f19e493bc4d95a998a
ppc64le dotnet-apphost-pack-8.0-8.0.32-1.el9_8.ppc64le.rpm 09552c662617625522f2ade08747747cb846fbb4bc9f805b8b8faaa2c814642c
ppc64le dotnet-sdk-8.0-source-built-artifacts-8.0.132-1.el9_8.ppc64le.rpm 429f060ebadc1334effa64ba104c0ec41458cb1ef745f07af3d421ac4e1bc9a2
ppc64le aspnetcore-runtime-8.0-8.0.32-1.el9_8.ppc64le.rpm 5acacf5fbffa94d8487b10edb8dcc88c78a52fe1aafdf06b6190f0cda475e2fd
ppc64le dotnet-sdk-dbg-8.0-8.0.132-1.el9_8.ppc64le.rpm 62521a258cb9d9fbde11198fa4e96ec75a759b46a1ecabc3dc30f43e99520fd0
ppc64le dotnet-runtime-8.0-8.0.32-1.el9_8.ppc64le.rpm 6c9b8d0395d7c0c1ddcbffb0db5e9ea9893f2141ef8a4430faafe11190f5fd72
ppc64le aspnetcore-runtime-dbg-8.0-8.0.32-1.el9_8.ppc64le.rpm 96ffe1715d0bc2748c45916a593171b985174d8aba2391dca49d5f04fc7d817e
ppc64le dotnet-targeting-pack-8.0-8.0.32-1.el9_8.ppc64le.rpm b3b133ce29646b52480b888629a8b7a1ef840ba12a5b9777dbb7a1337f839723
ppc64le dotnet-hostfxr-8.0-8.0.32-1.el9_8.ppc64le.rpm bed4743fff11962dfad143893cdfd51d47b86fa7e19a1c41c58652a178559a46
ppc64le dotnet-templates-8.0-8.0.132-1.el9_8.ppc64le.rpm cacef85b21721641027283fc269e93231b3318a2a3ae4d8f5fa30c676d7f4e92
ppc64le aspnetcore-targeting-pack-8.0-8.0.32-1.el9_8.ppc64le.rpm e3970028520e6ca87918edad43c5bc55ba323281595531ff0424edb5037605bd
ppc64le dotnet-sdk-8.0-8.0.132-1.el9_8.ppc64le.rpm fe30d638f377ae6c5558f3da7285cc1fb3dba93b71f8765112f506ca365c17e0
s390x dotnet-runtime-dbg-8.0-8.0.32-1.el9_8.s390x.rpm 2b74b534a83c59d25153d04396521af5085f778a671b4aea7af909291c31999f
s390x dotnet-hostfxr-8.0-8.0.32-1.el9_8.s390x.rpm 3d9bdea89720a3f6e6f7ebd7aa566f4a6543cee4b93a0508261784dc42d8f00c
s390x dotnet-runtime-8.0-8.0.32-1.el9_8.s390x.rpm 4324a76b558d7ee5739228db14599bbd0187acd3b1dde8709d3807270233cb2a
s390x dotnet-sdk-dbg-8.0-8.0.132-1.el9_8.s390x.rpm 5c9f171a01c514616f45d49673eb3b13f671ec41245b5f7c291c61d3fb75a731
s390x dotnet-sdk-8.0-8.0.132-1.el9_8.s390x.rpm 6893b5092ab61cc6408e8c211d22af71e34a1f37d84f01b302d14f30482d60ac
s390x aspnetcore-runtime-8.0-8.0.32-1.el9_8.s390x.rpm 7334f87ff7ef4ee29ef1a8ce28950e82187eab5062cc23e663153f5a7a6e9781
s390x dotnet-sdk-8.0-source-built-artifacts-8.0.132-1.el9_8.s390x.rpm 846a6650b47bc3b126b165361a6a299935ff069726950ccdd69b5b2b19eb868d
s390x aspnetcore-runtime-dbg-8.0-8.0.32-1.el9_8.s390x.rpm 9b692a3b6f8ac3d10ff93bed88761c7692c33956c4a0a2d6a1ad406bc318fbfb
s390x dotnet-apphost-pack-8.0-8.0.32-1.el9_8.s390x.rpm a093c83ccd767ee55a520139a9e2311e8054a86434d9e246330d4f91b58a10e1
s390x aspnetcore-targeting-pack-8.0-8.0.32-1.el9_8.s390x.rpm a265b78b430b7c4df20d0d44e8ab65cc5aea56e2729cc68e3ddd88e22d0fa3fb
s390x dotnet-targeting-pack-8.0-8.0.32-1.el9_8.s390x.rpm c252d36a0a6c3462dae9fec4427c5bba3da35a27aff675867e2768beacec6995
s390x dotnet-templates-8.0-8.0.132-1.el9_8.s390x.rpm f15857bc41a705725f652818bef1d30c044dc0ef0becb3aacc178f098964775d
x86_64 dotnet-runtime-dbg-8.0-8.0.32-1.el9_8.x86_64.rpm 053de66e0f59ccafca9a9c82cedc876aa5ae1a3ddb25abad7e9a217b719db327
x86_64 dotnet-runtime-8.0-8.0.32-1.el9_8.x86_64.rpm 24c681336f460164761cf1b2002ccb2a29439b2ac58e0889d4dcbc94bcdfa909
x86_64 dotnet-sdk-8.0-8.0.132-1.el9_8.x86_64.rpm 350155d3794891dfe1770c0cc6e0fafc1c7055438fc1f053946463414df26262
x86_64 dotnet-targeting-pack-8.0-8.0.32-1.el9_8.x86_64.rpm 36991a5c2055ad5945057c0889f422c05436b3836a64b77481b05e39eb36032d
x86_64 dotnet-templates-8.0-8.0.132-1.el9_8.x86_64.rpm 3fca427f54edf65869ee7fc12e05fa6cc9e8dd05edd9a20e845c30b048d537f0
x86_64 aspnetcore-runtime-8.0-8.0.32-1.el9_8.x86_64.rpm 428b09805a0fe7584ee17f4d97bad1e9e2b84c78633541b9d5e2e11571f5e1eb
x86_64 dotnet-sdk-dbg-8.0-8.0.132-1.el9_8.x86_64.rpm 55f04829e20b43d3459c5dc7e87148b605a9e005eb6d6eda7bdd49bf1534f1de
x86_64 dotnet-hostfxr-8.0-8.0.32-1.el9_8.x86_64.rpm 5dc1e384bbac649bc808578bb2b1abbcdea8944f3cac26e08afb28fa6667d2e3
x86_64 dotnet-sdk-8.0-source-built-artifacts-8.0.132-1.el9_8.x86_64.rpm 6aeeaa78e1c98401953809bf03a02f95072c2c55470990b1ab14b5993986a723
x86_64 aspnetcore-targeting-pack-8.0-8.0.32-1.el9_8.x86_64.rpm 72a8b20f6b6dd664f1c6c9cdd2da324b9c5321912961c1530cf9072a230b522a
x86_64 aspnetcore-runtime-dbg-8.0-8.0.32-1.el9_8.x86_64.rpm 7bd626217f7bd3b68d0bf33858eca2bbcf8c0b7921dc5c3b6b2c9930ab0588f0
x86_64 dotnet-apphost-pack-8.0-8.0.32-1.el9_8.x86_64.rpm b8707581c8ecf4ce9c8f0dd2fb808edd9f4724acf12f9c2370c7e2eccc3f4547
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.