[ALSA-2026:25113] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-06-11
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-targeting-pack-9.0-9.0.17-1.el8_10.aarch64.rpm 085b61b8e2216405b9605ffebf0ea2b13164128b83f62c70e6a12a724d95f01d
aarch64 aspnetcore-runtime-dbg-9.0-9.0.17-1.el8_10.aarch64.rpm 203ddb08c59de644539cf095078c7ee7bf77cad3ca0064676616356eae527512
aarch64 dotnet-hostfxr-9.0-9.0.17-1.el8_10.aarch64.rpm 289f15698b6313f86f6dd861bfee65bb7527584f218464de90508be1f29b88a9
aarch64 dotnet-targeting-pack-9.0-9.0.17-1.el8_10.aarch64.rpm 3e448ca0ee67d5d9ba5118117c93e94868339e22dc8cd198fbf766b7fe318a05
aarch64 aspnetcore-runtime-9.0-9.0.17-1.el8_10.aarch64.rpm 40f1b630e8397b2719bdec491e876f1f3eca22f4f46349e3e7492c3f1f9f9d2b
aarch64 dotnet-sdk-aot-9.0-9.0.118-1.el8_10.aarch64.rpm 4deaab3d508feaa9fe69f8327ea09a38a91b1fa6ac3e65163c5b251ccbcdbaf4
aarch64 dotnet-sdk-9.0-9.0.118-1.el8_10.aarch64.rpm 74490ef608de0a248151d3a17f2267ce0b3cc47e663a3d4ae8dcafc17a7e8dbc
aarch64 netstandard-targeting-pack-2.1-9.0.118-1.el8_10.aarch64.rpm 99a3db869abe84df2e77068d0b9666a2460803d022dd4dbb251d2316125c3f3a
aarch64 dotnet-runtime-dbg-9.0-9.0.17-1.el8_10.aarch64.rpm 9ff71152827ba088d2e025c263ef05333bf6c717f467d8f54254f71a5b9ec8d4
aarch64 dotnet-sdk-dbg-9.0-9.0.118-1.el8_10.aarch64.rpm ac7a66cb165f4ab98bbe9f7ffa82bea363350ce49b59d6440de238e4f2ae228e
aarch64 dotnet-templates-9.0-9.0.118-1.el8_10.aarch64.rpm c32f5cfde6cfadacdad20d1499d65ef3a994d14e5cd62dc7c6b1b953a88fd63e
aarch64 dotnet-runtime-9.0-9.0.17-1.el8_10.aarch64.rpm cf24eaa3be323a1ad988ee827d51e91d7be090515d4f74e0a91c54738eece19d
aarch64 dotnet-apphost-pack-9.0-9.0.17-1.el8_10.aarch64.rpm d1ee2313aff17b9fa09e7328e927ff9cb02625cbcd0c50f7dab17eb0ea9233da
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el8_10.aarch64.rpm f74e2ccc81fe3f40859e7c862e52c52758df4af14ec200bd0dad6100b6a6db56
ppc64le netstandard-targeting-pack-2.1-9.0.118-1.el8_10.ppc64le.rpm 14bcae0c78bae5aeaf218b5aa1f6e7308edc4a6aaf3169681d3e1d6a5d11271a
ppc64le dotnet-apphost-pack-9.0-9.0.17-1.el8_10.ppc64le.rpm 22dea693feacd28dd8106b673e75232f52f04294c0004583ea9babf5859cf41d
ppc64le dotnet-sdk-dbg-9.0-9.0.118-1.el8_10.ppc64le.rpm 2b1b293685139818e7fa146d1d47555ae7115763dcf0fd5ce31ebb169bdf67aa
ppc64le aspnetcore-runtime-dbg-9.0-9.0.17-1.el8_10.ppc64le.rpm 3168a06994476fa97e6d9a46cb54a98f8d1b479c0ce8cc45e1e5ecbd9e6019a0
ppc64le dotnet-sdk-9.0-9.0.118-1.el8_10.ppc64le.rpm 39a77ea1cc7ae4b5870f0f68b8c6ab9abf51aa3ae7e0d564530ff0b19accddde
ppc64le dotnet-runtime-9.0-9.0.17-1.el8_10.ppc64le.rpm 5819e34847aebd71882fd41dc83cf18d50cf9cd5b082eba162360a3c88981fb8
ppc64le aspnetcore-runtime-9.0-9.0.17-1.el8_10.ppc64le.rpm 6c0b7354a6c091f51123c2ff01ca164160f48a25c1cd86837374ef947e46b337
ppc64le dotnet-runtime-dbg-9.0-9.0.17-1.el8_10.ppc64le.rpm 6fa365ef606b6af1c6b3e6e652dfdee835e49510ea51f7641e229bcb48464e69
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el8_10.ppc64le.rpm 7e2ad1cac25904cc5a3d641c426ee62a619f41a5a45d53a88f4febab22e51498
ppc64le aspnetcore-targeting-pack-9.0-9.0.17-1.el8_10.ppc64le.rpm b7a0de18c8c3d74ea2e47654360e2ac0ae0380a1f839657fc335aa4076463375
ppc64le dotnet-targeting-pack-9.0-9.0.17-1.el8_10.ppc64le.rpm c573dcefc45100a0ec4045246be3bb4a6c333653ecc70ee361c3865e3a92dd40
ppc64le dotnet-hostfxr-9.0-9.0.17-1.el8_10.ppc64le.rpm d1d67528dbd49c8d2ac7d82291a852a34d9a300fe2b9a2575fd933d919c67234
ppc64le dotnet-templates-9.0-9.0.118-1.el8_10.ppc64le.rpm f96c6978341672d44e8b76ca9f494e37156e890457d0d304e430a7c269047ff3
s390x dotnet-runtime-dbg-9.0-9.0.17-1.el8_10.s390x.rpm 32823079074c53faede113c240088d5c69db30b482fafbbbb2dab4a993bb6af8
s390x dotnet-apphost-pack-9.0-9.0.17-1.el8_10.s390x.rpm 3fc4da596b7d11c4883964b70d43153c5bed77523aa9921f857926e2d195f462
s390x netstandard-targeting-pack-2.1-9.0.118-1.el8_10.s390x.rpm 43c86ffdde67b4e8504207c821c6016ac6c43fdac68ffeac7082855424afa06f
s390x dotnet-sdk-9.0-9.0.118-1.el8_10.s390x.rpm 4820b0333bb9024f68ab7eba8c6560b8f97fe465e9dccc68c06193fa86cef8e3
s390x dotnet-targeting-pack-9.0-9.0.17-1.el8_10.s390x.rpm 4c5349e91bb55594fbdfcfe8ecf379526fca896c6de29b68ecc9e93c2f88f6b9
s390x aspnetcore-runtime-dbg-9.0-9.0.17-1.el8_10.s390x.rpm 58d001b7870e0bdbb7e36088074f35a0c20624f34cb7025f9ef552e2b2509d65
s390x dotnet-runtime-9.0-9.0.17-1.el8_10.s390x.rpm 8d7dbae8cdb6221befe107a7e01e7bafa467c398ee23500438fd6a85727ac2f6
s390x dotnet-hostfxr-9.0-9.0.17-1.el8_10.s390x.rpm ac8ee5bc528bf2a9324cf78048aaee7baa719d575b759101586b1954fd3b6c99
s390x aspnetcore-targeting-pack-9.0-9.0.17-1.el8_10.s390x.rpm d8dd531373b78feb5c001d0c3426ffebf1855f6ed0db67fc5a93862ba6482249
s390x dotnet-templates-9.0-9.0.118-1.el8_10.s390x.rpm dc18800749008fcc2101c71fb0b41311fc91fbdda029ae722e573b4e1a6d1275
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el8_10.s390x.rpm e346f5b9a6d44bc3484671303fca11d6468ffa25d11564994e297b128f85c618
s390x dotnet-sdk-dbg-9.0-9.0.118-1.el8_10.s390x.rpm f3e8f2a59b22eac8c64c8843598c147e05ae5ec4d6c21c66059bce9167995a17
s390x aspnetcore-runtime-9.0-9.0.17-1.el8_10.s390x.rpm f3fb3df47e78812703faa9fd06882a2661ceed03b3e701f725e6363990e0a7b0
x86_64 dotnet-apphost-pack-9.0-9.0.17-1.el8_10.x86_64.rpm 017ec0246c00f62c094d35dd2942006cd8511abfc779bfc98dc38f42a9316b6c
x86_64 dotnet-runtime-dbg-9.0-9.0.17-1.el8_10.x86_64.rpm 04c02acc1a3620d3fe48b2bd25e47b22c7d49e522caf0d6601105cc1db89ea9a
x86_64 dotnet-runtime-9.0-9.0.17-1.el8_10.x86_64.rpm 12b774cb472436a21dc8cedfc81387a7956f612031d3da87ad296e08c2f9dfc3
x86_64 dotnet-sdk-aot-9.0-9.0.118-1.el8_10.x86_64.rpm 2067c47ac836daf9540eeeebf67bf35a0f14dd739c9429582cec19b61de3dead
x86_64 dotnet-sdk-dbg-9.0-9.0.118-1.el8_10.x86_64.rpm 27cd723ee7ebcf9b4e9e7e58c67712bc572d73335bcc97b52b8a7a3628209ddd
x86_64 aspnetcore-runtime-9.0-9.0.17-1.el8_10.x86_64.rpm 60d27221643e424b91c1de03aa036d9cb626c10df34c8dbee0ef0077bb32c19a
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el8_10.x86_64.rpm 73063eba956dc13c86301dbd68dc136076ea8a362163d1519dfbec45e52f9e3e
x86_64 dotnet-hostfxr-9.0-9.0.17-1.el8_10.x86_64.rpm 8c0b0c9b4f257820a762bf6127a6e984265af73585c9552ce271dffc01bf1619
x86_64 dotnet-sdk-9.0-9.0.118-1.el8_10.x86_64.rpm 917cb8bff7105400f177d21a71b6f621b9e45d399970f653c48b65da1595d3e1
x86_64 dotnet-targeting-pack-9.0-9.0.17-1.el8_10.x86_64.rpm c433341b4d024098a6224958ad5911235a5e1a154520f5a1203051da2b02d194
x86_64 aspnetcore-targeting-pack-9.0-9.0.17-1.el8_10.x86_64.rpm d1e1c125d9a0b92c8b4b8199fb80ff851938a17a777afd77be324a84999ad3b1
x86_64 netstandard-targeting-pack-2.1-9.0.118-1.el8_10.x86_64.rpm d8c203d0e9ae00e7cfea46c55a72d38b092f31c7019f60c0fe520c696405e4f9
x86_64 dotnet-templates-9.0-9.0.118-1.el8_10.x86_64.rpm f5f6f86bd4027ab38f34e863a587f899adc35b02db1d1bb18946c0fc9f631d84
x86_64 aspnetcore-runtime-dbg-9.0-9.0.17-1.el8_10.x86_64.rpm f659185522791ea6362112e9695c227a149a4f5846abe115b1508ad52a0306e4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.