[ALSA-2026:4443] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-03-13
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-apphost-pack-9.0-9.0.14-1.el8_10.aarch64.rpm 0b0c9bcb09015b0953e02bf876939a1b72f64b3cb8aad6c87eba785184437ce2
aarch64 netstandard-targeting-pack-2.1-9.0.115-1.el8_10.aarch64.rpm 0d89c3bbcff1624f7a19da7ebbeb430bec943e6e98bf7de01bac2c827b97980b
aarch64 aspnetcore-runtime-9.0-9.0.14-1.el8_10.aarch64.rpm 13fce3ff5c2342e6a499dbc03088b5c4a44f8d27f1a03f2f65cb266c1651311c
aarch64 dotnet-sdk-aot-9.0-9.0.115-1.el8_10.aarch64.rpm 180f6af6cdfa38f2a98c58cc3e733832111f7ca5401591efb137cf7a30faf878
aarch64 dotnet-runtime-9.0-9.0.14-1.el8_10.aarch64.rpm 3645cd78273a2076c543a1d49d3aba258b77dc4ff5dd2388224a7c07cc187ce7
aarch64 dotnet-templates-9.0-9.0.115-1.el8_10.aarch64.rpm 5817f299c8b08ebb80c4c35ebe3164b0cb226aa012564563546e5347f4d2e4fe
aarch64 aspnetcore-targeting-pack-9.0-9.0.14-1.el8_10.aarch64.rpm 58e32bbc50767e77d4d3ebb2fc713acda516d29d488a681def44587a3d11d235
aarch64 dotnet-targeting-pack-9.0-9.0.14-1.el8_10.aarch64.rpm 59b0c550804b2a140317da2ba38ada53c1d1ef901e5e62e973d0f9fae0028db5
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el8_10.aarch64.rpm 895eb72809ba94971709aa69960bf368e61d73ad6dc8a81231dc3afb12cb8908
aarch64 dotnet-runtime-dbg-9.0-9.0.14-1.el8_10.aarch64.rpm b65e5c820dd3d90b9cdf782737a0a22a07a1adc6cda97969343693166dfc148d
aarch64 dotnet-sdk-9.0-9.0.115-1.el8_10.aarch64.rpm b8a0e09aa963016d7a99f626e8bcb4dc5dc758231e3986bc5448d779078a4586
aarch64 dotnet-sdk-dbg-9.0-9.0.115-1.el8_10.aarch64.rpm d3eb3e9b82cd956d08da0ab6835f8adc7608cdc778062a8b07edcf83d2680845
aarch64 aspnetcore-runtime-dbg-9.0-9.0.14-1.el8_10.aarch64.rpm e46c60119161669205498319f3727d71658083bb08fc87381ef49f79904adaf3
aarch64 dotnet-hostfxr-9.0-9.0.14-1.el8_10.aarch64.rpm ffc4d49483cf89e0bfd81d6e50f5f8f6f6122056dc2e76cb235ea6b06938e991
ppc64le dotnet-runtime-dbg-9.0-9.0.14-1.el8_10.ppc64le.rpm 16cf811b9243c0ef7863b06772c92697efdb8a0b2aa0d883faeb8763f665b2b4
ppc64le dotnet-apphost-pack-9.0-9.0.14-1.el8_10.ppc64le.rpm 2dc6bac576d56840f7bee79be2734d812ffda9df800443402494785571ffde15
ppc64le dotnet-sdk-9.0-9.0.115-1.el8_10.ppc64le.rpm 3ca54816b15e24876468a8b90a29bcbaad70c39fb151cdda2465a6727a8c1815
ppc64le netstandard-targeting-pack-2.1-9.0.115-1.el8_10.ppc64le.rpm 7fa19a82d8fa4a16daa1f51a6fe6c0d135eca291934e0907ac71c3dd77663a75
ppc64le dotnet-templates-9.0-9.0.115-1.el8_10.ppc64le.rpm 8d340ee850904e5a5ba0d1a0441f4406acb160a07e6af2e2f773c00f2d4f5a91
ppc64le dotnet-sdk-dbg-9.0-9.0.115-1.el8_10.ppc64le.rpm 8fe56ec89096c4a0a1a380d7d4959fef9daca2415da2c5e170d7f42245fbd849
ppc64le aspnetcore-targeting-pack-9.0-9.0.14-1.el8_10.ppc64le.rpm 97dc74fc3a773893b3e34d043764bf7807233e1623cf5b806cf7bdee94949e1f
ppc64le dotnet-runtime-9.0-9.0.14-1.el8_10.ppc64le.rpm b03a46171b87e841396bc7284ec37ad5e86afa02bd21e91df1926e63e93b96d9
ppc64le dotnet-hostfxr-9.0-9.0.14-1.el8_10.ppc64le.rpm c275cbbca8fc2db2debe5a57299e2fcf3fbf00e3cad1ef9f49df5c87819e5d9d
ppc64le dotnet-targeting-pack-9.0-9.0.14-1.el8_10.ppc64le.rpm c58ba574fcf61f7518d13b8eb1fc73747125ff876dae9f9ae79ca6a3abaebaad
ppc64le aspnetcore-runtime-dbg-9.0-9.0.14-1.el8_10.ppc64le.rpm dd085b1cd6706a45b348d62b5adb99274450101e4e9f02a1573d16cd85cc9954
ppc64le aspnetcore-runtime-9.0-9.0.14-1.el8_10.ppc64le.rpm f2c9e06ab25aa1ad108bbad0a1fe1a6c87bf22cda54df3c252b31d15e3cf7f02
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el8_10.ppc64le.rpm f3e04d8c22c5f0ad2fbd5d3edf55e255719fb807ad1ddb0734e27ac53b89c4fa
s390x netstandard-targeting-pack-2.1-9.0.115-1.el8_10.s390x.rpm 1e9385430dec2d63361b45afd2a4b4541803d1a4efc97e06bd74dd50be4968fa
s390x dotnet-runtime-9.0-9.0.14-1.el8_10.s390x.rpm 4b2d762ad87729a8d011128b39bafd01c61a148d782e7910d836329bc8169a76
s390x dotnet-hostfxr-9.0-9.0.14-1.el8_10.s390x.rpm 522aea886235f67c5d466affb1cb83e395a3a1ae3e3ee8cdb43ec52b0824232b
s390x dotnet-apphost-pack-9.0-9.0.14-1.el8_10.s390x.rpm 54b99e124faf776a2c5575ef09f12d727923ac55d1fff98025432f3e4c9a72fc
s390x dotnet-templates-9.0-9.0.115-1.el8_10.s390x.rpm 54e67c26d7e79010e7a440654f544353cc6585f89c2bb97be6184ba52077df97
s390x dotnet-runtime-dbg-9.0-9.0.14-1.el8_10.s390x.rpm 5e903244d256635d9b8537f545e33d6e183df993ee193071ceb59655c69d2a83
s390x dotnet-targeting-pack-9.0-9.0.14-1.el8_10.s390x.rpm 60b40381fbd1d81cdc16d854ae76a41eadbf038a6b8708f4a2160cfc445a23b5
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el8_10.s390x.rpm 6af95ec13cafaec9a1bba43f9eeca6a2192cd50c0398f2ffbfd0d19900267792
s390x aspnetcore-targeting-pack-9.0-9.0.14-1.el8_10.s390x.rpm 950ca9006cca9ed671cc300e9b110a0cf1fb6dfceca151a5e4b707a62660eed4
s390x dotnet-sdk-dbg-9.0-9.0.115-1.el8_10.s390x.rpm 989d5eb321837fa832e574ce85dfc389de7decc6fe0af5e84961c45d1af93fd2
s390x aspnetcore-runtime-9.0-9.0.14-1.el8_10.s390x.rpm c897fff36ef87c822620b8ab3bc2c6a75daf9e9c2a085853b77e4a23ac3e38de
s390x dotnet-sdk-9.0-9.0.115-1.el8_10.s390x.rpm d52257037dd748212e94ce9e3c467504fd737f1a1d771421bc017b00c0c32182
s390x aspnetcore-runtime-dbg-9.0-9.0.14-1.el8_10.s390x.rpm f1c5c0d40f42331ae67b6a92221539f5b0c70a0a6a43b33f54aa5e76daf0f856
x86_64 dotnet-hostfxr-9.0-9.0.14-1.el8_10.x86_64.rpm 32b5fb46b2e1cf9996427e33d25a1744f362be997a18c4e6fb5d8914ad194591
x86_64 dotnet-targeting-pack-9.0-9.0.14-1.el8_10.x86_64.rpm 49a57cb9aa6640fd99afe6175d62c0004fca79238b9315baff0261eabb69c88c
x86_64 aspnetcore-runtime-dbg-9.0-9.0.14-1.el8_10.x86_64.rpm 5cdb6b7237dd54fde9023ce653a970eec150a1d5dd21feaed66b1195f9680f01
x86_64 netstandard-targeting-pack-2.1-9.0.115-1.el8_10.x86_64.rpm 5eb9f8ebf59581900fbfd35f8dce403102f2fa88f6a31d672a6044dcb92d1713
x86_64 dotnet-apphost-pack-9.0-9.0.14-1.el8_10.x86_64.rpm 8e3fb7613cc51715a91d0df3abf8d6f6556a9979c750501bea3bf9bb7a95a465
x86_64 dotnet-runtime-9.0-9.0.14-1.el8_10.x86_64.rpm 9163a29697cdd6bf9f0cf86a0a1abd9c135971b65be7203b936dc527e165fa43
x86_64 aspnetcore-runtime-9.0-9.0.14-1.el8_10.x86_64.rpm 9e689f024e3259383a818eccdc69de444b24184e80d2d3ead4f06e2684dd1b43
x86_64 dotnet-sdk-9.0-9.0.115-1.el8_10.x86_64.rpm aea0dee0a7a9f20f648f6d42508502f012b2802a64d0c3d6935438d4e2e8b0a9
x86_64 dotnet-sdk-aot-9.0-9.0.115-1.el8_10.x86_64.rpm bd5c994f8ac9454c9e5a583cc3fe5b7e0e37496dbf673167b53778b489743a7a
x86_64 aspnetcore-targeting-pack-9.0-9.0.14-1.el8_10.x86_64.rpm c3bcbfc8be5f1b7ea14ad548e803e8653cc724ca6cbda9d31a52a62b505bbb07
x86_64 dotnet-templates-9.0-9.0.115-1.el8_10.x86_64.rpm c83221582fd524266dd28dd5103f5d32980858c69db97de3b95040999c31cd00
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el8_10.x86_64.rpm f43895e4a8946021d9af2fec0a6625c348c9bda67889384beda3ebbbf5359169
x86_64 dotnet-runtime-dbg-9.0-9.0.14-1.el8_10.x86_64.rpm f7c237887b756a101aec6c84d4e96a48f9b0baf8fda55b264d2758c304981087
x86_64 dotnet-sdk-dbg-9.0-9.0.115-1.el8_10.x86_64.rpm fcf42eb76c09f0268ba32b3f43a76482f05a6fa5b8ed19d39aea34a3e98485f4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.