[ALSA-2026:25112] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-06-11
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-targeting-pack-9.0-9.0.17-1.el10_2.aarch64.rpm 02e4a9e38672371420a8bacf01e5210251e5fba4af4614aec735091234ffa320
aarch64 netstandard-targeting-pack-2.1-9.0.118-1.el10_2.aarch64.rpm 112190aaac498ffaea13e6b5e7acdeb6c4ca01d4163f21c87e5830e8ecc14642
aarch64 aspnetcore-runtime-9.0-9.0.17-1.el10_2.aarch64.rpm 3b5734940945c105327c41c1e8301ac58bfe291be829a044a08d3df26755a906
aarch64 dotnet-runtime-9.0-9.0.17-1.el10_2.aarch64.rpm 52f28a9f05a19d097f27f1099983ec251848b22b90b403a82df771fa480a3b09
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el10_2.aarch64.rpm 564f058f19761ffccdaa58a26eb68243b471ada1c509502adf6c09eadd77eaf4
aarch64 dotnet-sdk-9.0-9.0.118-1.el10_2.aarch64.rpm 5b3912b87f515c90c9b13f871b9838c7137d327443d784343d7f1e1e5f598e17
aarch64 aspnetcore-targeting-pack-9.0-9.0.17-1.el10_2.aarch64.rpm 5d8767b92e8062ab4c59d73491e017715e533abcf4e970e73681ad936e32e24e
aarch64 aspnetcore-runtime-dbg-9.0-9.0.17-1.el10_2.aarch64.rpm 6387c9b56a33d6885e3bcbf53ef969f5749b15654841a4a953b78560cfd6b4b8
aarch64 dotnet-sdk-aot-9.0-9.0.118-1.el10_2.aarch64.rpm 7443a637aed95fe0104d8310c182854071fc0b030e28cf253342cd750bb1bd87
aarch64 dotnet-runtime-dbg-9.0-9.0.17-1.el10_2.aarch64.rpm 9c31e6d8f7cfb934fece6703a10dfc0bc18f4b9ec07bcea037e862692c86762a
aarch64 dotnet-apphost-pack-9.0-9.0.17-1.el10_2.aarch64.rpm 9f3b898c3ea515cd17eb7ebdd70243df2d0b5d145a7d929dad24635359660773
aarch64 dotnet-hostfxr-9.0-9.0.17-1.el10_2.aarch64.rpm a2b0d586abfa23837b6f13ea78ce506ae46563acf50aada095869d4cf5be904b
aarch64 dotnet-sdk-dbg-9.0-9.0.118-1.el10_2.aarch64.rpm f1a70a153abfb5fb0cb8ddb3fb02c3dc36948a39ea2bcff35737c814eef7c723
aarch64 dotnet-templates-9.0-9.0.118-1.el10_2.aarch64.rpm f927a19795431b6c2c78d1b75502f8b33f030ba50474c0eae0b1b29c02578c52
ppc64le dotnet-sdk-dbg-9.0-9.0.118-1.el10_2.ppc64le.rpm 0b0e9147f07f113f6284add08982fa319096110672f2d360a3968c921ba9730d
ppc64le dotnet-apphost-pack-9.0-9.0.17-1.el10_2.ppc64le.rpm 11136ce9c31960b413f39c4fbd7809ea6fe2bc407d1b8b172cfc697388f6cc96
ppc64le dotnet-runtime-dbg-9.0-9.0.17-1.el10_2.ppc64le.rpm 2915470cde3dc4a6158e1cdb00b8dfafe65874b7837c140bbf4c9657e664cfc5
ppc64le dotnet-runtime-9.0-9.0.17-1.el10_2.ppc64le.rpm 338bb3fbccbdaf3ce7a6309e0ad11ea1ae0fc8c2fa28f7aa8b9eb3b8029549d3
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el10_2.ppc64le.rpm 5bf521ccb4c06b6a1fe17ff985786e0966444ae48d58ef5037d6cbe711dfb477
ppc64le netstandard-targeting-pack-2.1-9.0.118-1.el10_2.ppc64le.rpm 66d75049a5d8597b346b1698e6bd5eb91b6db693a90a08842f92b8157fd27184
ppc64le aspnetcore-runtime-9.0-9.0.17-1.el10_2.ppc64le.rpm 6d442267287324a7617a2e621a71261e44e01811b6700144cbc05c3040dd65ec
ppc64le dotnet-hostfxr-9.0-9.0.17-1.el10_2.ppc64le.rpm 7f129f3e2dce62fd2aee45f7342dfe162d90bea63b3e4f838fbae3aa0e24ff5e
ppc64le dotnet-templates-9.0-9.0.118-1.el10_2.ppc64le.rpm 8d31fc07cc2fa99890c58629798fbfeea0da79d01a99bd937168434f8b9dc94b
ppc64le dotnet-sdk-9.0-9.0.118-1.el10_2.ppc64le.rpm 95af5ffb535b5ba73c7871e3dbfb467ef8664f977fdb25eaf3124e4839af6b1d
ppc64le aspnetcore-runtime-dbg-9.0-9.0.17-1.el10_2.ppc64le.rpm ae59fdaaff6fbeb371e147f69d21512e146153de8e8db161544f05d9f5790933
ppc64le aspnetcore-targeting-pack-9.0-9.0.17-1.el10_2.ppc64le.rpm f4615007bde963b179e8dc4bc496699172e64510efb9173d10da62ccab621abf
ppc64le dotnet-targeting-pack-9.0-9.0.17-1.el10_2.ppc64le.rpm ffd107b43a50350e44060c0d032fedaf3e63f9329f577d6d9ad8a4876167676c
s390x netstandard-targeting-pack-2.1-9.0.118-1.el10_2.s390x.rpm 09647a5b59908e1a3e8af8207816fe5fde3de8abf1f362a71aa1068d17d80455
s390x dotnet-sdk-9.0-9.0.118-1.el10_2.s390x.rpm 306657baad6f4279fe6c4e67a0749fc197c8fe8c97fa5defbd6f17043d0f8fbd
s390x dotnet-hostfxr-9.0-9.0.17-1.el10_2.s390x.rpm 401273eaf0a4a52cfe862a4baae89c51526aa99e4dd1bd82064e6af0fb1d9a94
s390x aspnetcore-runtime-dbg-9.0-9.0.17-1.el10_2.s390x.rpm 61dad1811d3dc6f861f19892bd2baa170589d17aee8c7f88c1402212db88dbf0
s390x dotnet-runtime-dbg-9.0-9.0.17-1.el10_2.s390x.rpm 685cabd3dabbac0d7ab768c796c55f6e5ee09c5f4f2a5406c468e200a864980f
s390x dotnet-templates-9.0-9.0.118-1.el10_2.s390x.rpm 6ab746190cf083971a13ce4b172e6f7d4ec958cb5b1936e85db3d0699a5b1999
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el10_2.s390x.rpm 6c149ccd7115bf58b853137459f9a37cfe1dc4c4babff01587347f3127f17b04
s390x dotnet-sdk-dbg-9.0-9.0.118-1.el10_2.s390x.rpm 6e9d81c117c81c986deec5c73aeaeaa13fc5e40650a0b31b91e9d8193d63af79
s390x dotnet-runtime-9.0-9.0.17-1.el10_2.s390x.rpm bc6e36abe656e5092d9e5cadaf4b87c772c2495301e86eb09d07ac5b14054c6e
s390x dotnet-targeting-pack-9.0-9.0.17-1.el10_2.s390x.rpm bf92b43276c45bc2d409a82038736ee3a973ea36cb8d9e1de1d9c48d057bb033
s390x dotnet-apphost-pack-9.0-9.0.17-1.el10_2.s390x.rpm c8af7f15feb90f44840a0689846636c7927e9a38a1c2d7bbce63f135bcc0898c
s390x aspnetcore-runtime-9.0-9.0.17-1.el10_2.s390x.rpm d20dca5467e963060fe944ce4d57a197d0fda4b0e775ea5f5c9e5c2ff41f166c
s390x aspnetcore-targeting-pack-9.0-9.0.17-1.el10_2.s390x.rpm e82c2057c9daa825547eba06a472d593eddaac6d5848e76b69ffbe258ee4e0c9
x86_64 aspnetcore-runtime-dbg-9.0-9.0.17-1.el10_2.x86_64.rpm 0334c81eb124d0db0eb427ce4873305c4143e94b5fa6f44afd52f054a42e642e
x86_64 dotnet-runtime-9.0-9.0.17-1.el10_2.x86_64.rpm 0f2d4b3a55ab1c5cb59aad8321404e599ad43cbb361e92455118d9b3551ffb45
x86_64 dotnet-templates-9.0-9.0.118-1.el10_2.x86_64.rpm 2a366b30f70cf7d8905f04c0725620f7c51d9ce8612ecd3aa5f2f71d72eebbe0
x86_64 dotnet-sdk-9.0-9.0.118-1.el10_2.x86_64.rpm 655c5944fd1d067311875edb81a6f9cf5e522b8a5dd37ee9ce0a305b295afe25
x86_64 dotnet-targeting-pack-9.0-9.0.17-1.el10_2.x86_64.rpm 6e2470826e4289930336b63c15d05df3f4a4e2d28793a0c221a5a8118f100c33
x86_64 aspnetcore-runtime-9.0-9.0.17-1.el10_2.x86_64.rpm 70eda91274f8f46af5b38ca0b18235d1d1083e24dd0ebd588fd33e41aeb2d94e
x86_64 dotnet-hostfxr-9.0-9.0.17-1.el10_2.x86_64.rpm 868c53022bcc8c383ed74b6dfa94b137289a1db5eb567af81e1f7bed9879a1a2
x86_64 netstandard-targeting-pack-2.1-9.0.118-1.el10_2.x86_64.rpm 995edca15dd800a4e7c876c2597f0cd3fcd33b38723d064d782c9ec1342ffb3e
x86_64 aspnetcore-targeting-pack-9.0-9.0.17-1.el10_2.x86_64.rpm a8ed2fa14de30d27b6c584ef1998d839690bf7a7e0d070abdf54c43a261a73ad
x86_64 dotnet-sdk-aot-9.0-9.0.118-1.el10_2.x86_64.rpm aa118772e1312c02c6b8fbb50bd997b7845d1472d396969edbe6f677ce30ea1f
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el10_2.x86_64.rpm afbcdd33df4f30cab156eaf08b99255c8fd92774c8568ae8fbd3959d883d7779
x86_64 dotnet-apphost-pack-9.0-9.0.17-1.el10_2.x86_64.rpm c8c62cc22e7b6af41c0bff5c4579c169d75085ef3693a41d19481f5bf4035e6b
x86_64 dotnet-sdk-dbg-9.0-9.0.118-1.el10_2.x86_64.rpm cb315fd4315b62b70903f7ef9d0c8028c8078edc058b836ef08e0cbb42278688
x86_64 dotnet-runtime-dbg-9.0-9.0.17-1.el10_2.x86_64.rpm d5fff9e13840caef977f4292062f13fc9f1e4fee921140769554af9ee61f7328
x86_64_v2 aspnetcore-runtime-9.0-9.0.17-1.el10_2.x86_64_v2.rpm 067f2b4c11f16adc80d3a2f6228b1b86ab56c3cda52cac2448a2a8c3cd1f5adb
x86_64_v2 dotnet-runtime-dbg-9.0-9.0.17-1.el10_2.x86_64_v2.rpm 2579da610a121a5e9c629af5cc5dade0905c1c0b722820b2fe5e57b74953d9f4
x86_64_v2 dotnet-templates-9.0-9.0.118-1.el10_2.x86_64_v2.rpm 343025e058285aa29eb862543d62284f46e8c5ea7e5e3d007df0124deae72b04
x86_64_v2 dotnet-runtime-9.0-9.0.17-1.el10_2.x86_64_v2.rpm 3f46da42ea2afc9764a0e67304a24370cd1cf7191013eed69d93bf8dc93c8854
x86_64_v2 dotnet-apphost-pack-9.0-9.0.17-1.el10_2.x86_64_v2.rpm 3ffceb6140cbdc7947a92e2805b7bd31271fafdf78cb0427c20adc7cea351969
x86_64_v2 aspnetcore-runtime-dbg-9.0-9.0.17-1.el10_2.x86_64_v2.rpm 8c7ee2ae55346182b6a966012ecf4ac2fbe172051c5a0089b5c407291278f8a1
x86_64_v2 dotnet-targeting-pack-9.0-9.0.17-1.el10_2.x86_64_v2.rpm 8f8dc63c5e1767e60707766b7a56cd69724d47cefce62ac11cf791bdeb4bb5a4
x86_64_v2 netstandard-targeting-pack-2.1-9.0.118-1.el10_2.x86_64_v2.rpm 986a0fa4d033fb7e79fb8153797bcda8eb3efb33dd9c2933e0a685052b1c7fcf
x86_64_v2 dotnet-sdk-9.0-9.0.118-1.el10_2.x86_64_v2.rpm b5eb9a6f5519de5959d4c5fd48346bf7e3c7458d662870cc00e6f52a35e91a4a
x86_64_v2 dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el10_2.x86_64_v2.rpm bf7d8d556549e9dcf47069ffe963f9d71bf6c0525c7b95f353efd8e2f27dab42
x86_64_v2 dotnet-sdk-dbg-9.0-9.0.118-1.el10_2.x86_64_v2.rpm c300e33ce61c58dc6c8bfebf31332e82d9c382fca7b4058a0aefe0ba04ab6bbb
x86_64_v2 aspnetcore-targeting-pack-9.0-9.0.17-1.el10_2.x86_64_v2.rpm f0a1a38e7ccb478a687931af8e98efa7fc67ab3acc3992c2f0bb84ac2c5af187
x86_64_v2 dotnet-hostfxr-9.0-9.0.17-1.el10_2.x86_64_v2.rpm f844c97ed84a085a8968e54c13dce8a3c2a6b35bd938a58e7b0d584f465a76c4
x86_64_v2 dotnet-sdk-aot-9.0-9.0.118-1.el10_2.x86_64_v2.rpm fe1fb20a53d536dad51a28678d42a3e0f846ffa4c81ba8e686f8db094a25f763
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.