[ALSA-2026:21294] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-05-29
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-hostfxr-9.0-9.0.16-1.el8_10.aarch64.rpm 13abf3bdb5291240b98682acb63945e941ae5ea41b82a14ef7086021be2e0478
aarch64 dotnet-runtime-dbg-9.0-9.0.16-1.el8_10.aarch64.rpm 1e56eb019b619f10b09b3b7be344880ec6c866eeaccdafad8aa54898d2075436
aarch64 dotnet-sdk-dbg-9.0-9.0.117-1.el8_10.aarch64.rpm 26c15e4f925d687146a2b14f939e08a7ae84c00f4a673c3e1b59937bc49aa8ca
aarch64 netstandard-targeting-pack-2.1-9.0.117-1.el8_10.aarch64.rpm 2aeb20bb782c590e1abd9599f61454a72b5b885f97e6959fae6c77da2d1feee9
aarch64 aspnetcore-runtime-dbg-9.0-9.0.16-1.el8_10.aarch64.rpm 34ffc0aba6acad29b27be6f66bd438c40557e0f44a13a495c641d7384c42cb28
aarch64 dotnet-templates-9.0-9.0.117-1.el8_10.aarch64.rpm 4e50dca04b062056d9725922f30f7187e99524a0a31a14681daf123e3cc8e945
aarch64 dotnet-apphost-pack-9.0-9.0.16-1.el8_10.aarch64.rpm 7b7c8f8de97842afe764e7b0a9c6aaa4ebf9d9efbcf6f09d041c79a744529b8b
aarch64 aspnetcore-targeting-pack-9.0-9.0.16-1.el8_10.aarch64.rpm 831433549d99b8c8b6204f2fffb6cc77aefb05223d9c3886c59b441624d7bb6e
aarch64 dotnet-sdk-aot-9.0-9.0.117-1.el8_10.aarch64.rpm 85368966a1366f97a239f53c5b1711f093dde9ce526fac3bfe4ae68d7d074b99
aarch64 dotnet-runtime-9.0-9.0.16-1.el8_10.aarch64.rpm 918c796d574572edb2a6c2364e4399a260f0245f42e09f7231cd6d1cf41fac0c
aarch64 aspnetcore-runtime-9.0-9.0.16-1.el8_10.aarch64.rpm 9e662e62eb6a777b0ff5897ae3696e23e44326a25ab6149c2dc916674bcb6303
aarch64 dotnet-sdk-9.0-9.0.117-1.el8_10.aarch64.rpm e1522868b3f2ff507bd48156784bbedbe00cdffda98540fb999486fc23c50bcc
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el8_10.aarch64.rpm ee0f2192762f348168e593d654567c82fab8dab53aaaaa201c9a417d1de6b3ba
aarch64 dotnet-targeting-pack-9.0-9.0.16-1.el8_10.aarch64.rpm f63fa4ea33759958edba8d7d8d63cfcf2dbc55e9fc0ecb2def6253ecdb01aab4
ppc64le dotnet-targeting-pack-9.0-9.0.16-1.el8_10.ppc64le.rpm 1120d49f71fda2253116798d9ecb15139f15fdf10aed1ecd311e97d8529a5af2
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el8_10.ppc64le.rpm 1291d6f360cbd701b0f964e7cd1ba2ba4f19dc127686ba7bda9f328ef0909e38
ppc64le dotnet-sdk-dbg-9.0-9.0.117-1.el8_10.ppc64le.rpm 28835a698d783f4fc11427ba279c06585fa81c6917178464f19326791ee0c486
ppc64le dotnet-hostfxr-9.0-9.0.16-1.el8_10.ppc64le.rpm 482b181987c106a3169ebebf2e70a9045e88bf3a4f2ca5db938940997457bebd
ppc64le aspnetcore-runtime-dbg-9.0-9.0.16-1.el8_10.ppc64le.rpm 4b6c20555f3cc47a0bd5bb429a918f4413846cc13177a2ec1ff1684ad1b95495
ppc64le dotnet-runtime-dbg-9.0-9.0.16-1.el8_10.ppc64le.rpm 69c221926fee69faeb1fb07d4bf7eff066533371442f86151a2d9b8c878cdcf4
ppc64le aspnetcore-targeting-pack-9.0-9.0.16-1.el8_10.ppc64le.rpm 793a41bf516c19e7d7eb64d3513b89a9654d3b53c5b0072ae952ebb8134f7903
ppc64le netstandard-targeting-pack-2.1-9.0.117-1.el8_10.ppc64le.rpm 7dcae777524483fd9dc682488f7ec2496af090c04a1b5dbdaefa4fc4341edb9d
ppc64le dotnet-runtime-9.0-9.0.16-1.el8_10.ppc64le.rpm 9b3bb6686c03339e4d587ba8fca1024f81f97d06f211d7a4768604f0bebd109c
ppc64le dotnet-sdk-9.0-9.0.117-1.el8_10.ppc64le.rpm b622320f0617a1092a99e5a8449d67d49e0366029fb665de05094280a9ae97f5
ppc64le dotnet-templates-9.0-9.0.117-1.el8_10.ppc64le.rpm c7e156dc971ead541df5bb5f047edc70bc14a5ff2e3228d808b38d6b090dad34
ppc64le dotnet-apphost-pack-9.0-9.0.16-1.el8_10.ppc64le.rpm c852ce69cec900bff6f51c5ca9a7e5eef6904f90df609e70c1c55621755b887b
ppc64le aspnetcore-runtime-9.0-9.0.16-1.el8_10.ppc64le.rpm e4d1415e11075554955d2b4bca4d63c64a8dc9be46eb76355155a85c5d8c13cc
s390x dotnet-templates-9.0-9.0.117-1.el8_10.s390x.rpm 04172620afe1a88dc8f9fa7ccff3b952b46cf2f10f4dec2c7127be5354f6693b
s390x netstandard-targeting-pack-2.1-9.0.117-1.el8_10.s390x.rpm 201302347e4be38063528a1137ca48f76f81ba4252d6bac60cbf3534bd3e73f6
s390x dotnet-runtime-dbg-9.0-9.0.16-1.el8_10.s390x.rpm 4ead79526b3764f40767d54d32b6825bb9a45689a580dbf3ed050a2ae3c7400a
s390x dotnet-sdk-9.0-9.0.117-1.el8_10.s390x.rpm 4f4009039dabe2200541dcfd461380274ff1f5e7a01b92744b0d20450db7f876
s390x aspnetcore-targeting-pack-9.0-9.0.16-1.el8_10.s390x.rpm 5ac9225d3f5e2108a60be2bb6a03c9050b858f13e8931c85861713a67b480577
s390x aspnetcore-runtime-9.0-9.0.16-1.el8_10.s390x.rpm 655e6a1a6e31d2efba2c74309354505b23bd52a1418f86a9eaf95e8c07aea592
s390x dotnet-sdk-dbg-9.0-9.0.117-1.el8_10.s390x.rpm 6d1abd4e74acd5b9e51a047fc548b7c101b5dac6ffdd9787f40ab2ac767c6c59
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el8_10.s390x.rpm 850444b26c764e4f8e0ae05eaf3dcd161a9f16530ae05f33c2305268badd90e5
s390x aspnetcore-runtime-dbg-9.0-9.0.16-1.el8_10.s390x.rpm 8504c021ca2839011a5240a426630f171e1a24a250898723dc8a515d256edd41
s390x dotnet-apphost-pack-9.0-9.0.16-1.el8_10.s390x.rpm b11528c478d0a618c6f786681f6869c7c6fab36f4c3cd115630cb931eae73697
s390x dotnet-targeting-pack-9.0-9.0.16-1.el8_10.s390x.rpm b5d1177c08a75195baef87968c8727c6db3f713b404557f6c996e4b75ab618dc
s390x dotnet-runtime-9.0-9.0.16-1.el8_10.s390x.rpm cf7317aad7412d951b908fa71b4fa33a319a9d97786aab26208ab6e06f6130f1
s390x dotnet-hostfxr-9.0-9.0.16-1.el8_10.s390x.rpm e527c5863a9cb9c563dc88d38c2469f9061d2d81a1ebcc6715c6eedc51b87eea
x86_64 dotnet-templates-9.0-9.0.117-1.el8_10.x86_64.rpm 02f46dc674fb2fd8464eccb10ea9b0a00b54d78c826c5df31b2d9bead3d19a8a
x86_64 netstandard-targeting-pack-2.1-9.0.117-1.el8_10.x86_64.rpm 06febc44a8ab12747a7440c27fdabcbcb9d68d3b6ee4a914214b834c99f118dd
x86_64 aspnetcore-targeting-pack-9.0-9.0.16-1.el8_10.x86_64.rpm 52d6e1af66d9b4627d0d5df3c9ef817d5f0faa3b6d645f34bdd2d9f31ba26416
x86_64 dotnet-hostfxr-9.0-9.0.16-1.el8_10.x86_64.rpm 59c21c8f235ce6b9c94638440c178ec0af65c7ccec555d700f73c6ea7754447c
x86_64 dotnet-targeting-pack-9.0-9.0.16-1.el8_10.x86_64.rpm 59d61327cc7588e5b6873b8b74b3073c3c098677bfd5e45f14629ba7725f67a3
x86_64 aspnetcore-runtime-dbg-9.0-9.0.16-1.el8_10.x86_64.rpm 5dac2aa5d2f281c777f6971a9684bb4ae6a8f71139203a1ab91e8982bbde81a5
x86_64 dotnet-sdk-9.0-9.0.117-1.el8_10.x86_64.rpm 62c8a24afc09fd1611b832d7237b9077507b4b341f29acc32f8b524e7bfe7cee
x86_64 dotnet-sdk-dbg-9.0-9.0.117-1.el8_10.x86_64.rpm 642a2e8663a37bf1be52a7c30b531abf1ae407f21914739e7adda6b1986bb4eb
x86_64 dotnet-runtime-dbg-9.0-9.0.16-1.el8_10.x86_64.rpm 7213eeeaaaf429d46d4b47ced66b53adcd8d442fb704ed9e1c1aae595f311139
x86_64 dotnet-apphost-pack-9.0-9.0.16-1.el8_10.x86_64.rpm 8a901fad1daa6674d21d03fa8200009ec5e3226322ac7cd81bce6bfd39d62fd9
x86_64 aspnetcore-runtime-9.0-9.0.16-1.el8_10.x86_64.rpm bc70748f2916f4dd55205e8dcbcf64f47716095a0cb23f639c583fd2551ae2ae
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el8_10.x86_64.rpm cd7ae71b4abcc14ccd250453650b855c940b25efe16d5fbb195d193e4fd35767
x86_64 dotnet-runtime-9.0-9.0.16-1.el8_10.x86_64.rpm e1cf6ffa446a5357ab4ea6bf3ccd90f72118ede31e7b9b5d44b9901596be2939
x86_64 dotnet-sdk-aot-9.0-9.0.117-1.el8_10.x86_64.rpm e5c4f62883fcf810200906e2f0f2743c9575e7f21ecff3213feff318061429ce
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.