[ALSA-2026:54550] Important: .NET 9.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-08-14
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.120 Runtime version: 9.0.19 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.120 and Runtime 9.0.19 (JIRA:AlmaLinux-235473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-targeting-pack-9.0-9.0.19-1.el8_10.aarch64.rpm 04efad5e95e8f1a49fdd8a7cc2c9b3ee157ec0146f8091688e79397b16de015c
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el8_10.aarch64.rpm 073926d28ad71528b35e7240e808bcea501c3937498ae718f437e2bb55772daa
aarch64 dotnet-apphost-pack-9.0-9.0.19-1.el8_10.aarch64.rpm 0ba0affb32ba4d9c027ed4f37933cd2c3c9830821d6a087a14a396e8acb01cd6
aarch64 dotnet-hostfxr-9.0-9.0.19-1.el8_10.aarch64.rpm 0ff7b51d6bd012d6d823c7636fcbc37df937ebed6e48eef5d2fa691c80902775
aarch64 aspnetcore-runtime-dbg-9.0-9.0.19-1.el8_10.aarch64.rpm 34a80a9b2580adb050954c8b561505b7ba1778af75f2d7f012ada43cf0eb31ca
aarch64 dotnet-sdk-dbg-9.0-9.0.120-1.el8_10.aarch64.rpm 5a2a383808e4a45e659f1ab5de947e99036bb8fa71b550742b20dd26fcc868f4
aarch64 dotnet-runtime-dbg-9.0-9.0.19-1.el8_10.aarch64.rpm 5b85bbc55eefbb6b0e2e6666fb81d092c87793ed54e3046b22c3364659ba4553
aarch64 dotnet-targeting-pack-9.0-9.0.19-1.el8_10.aarch64.rpm 74075181665afc87f06b92a32b1e208b66c344eed74e43d3c500b37b498e3296
aarch64 dotnet-sdk-9.0-9.0.120-1.el8_10.aarch64.rpm 89b0a2285943bf8ee79d3f49a15f43093779e1a17497253f0de011ce6b3e5596
aarch64 netstandard-targeting-pack-2.1-9.0.120-1.el8_10.aarch64.rpm a1bd47cb57de3d0a59b207aec80a09a721f956983cd42e1ae01363bfe1652405
aarch64 dotnet-runtime-9.0-9.0.19-1.el8_10.aarch64.rpm bf81edc728110a513af1fba61a68b5d683fa79f98a5194f16dec16ca56dc309a
aarch64 aspnetcore-runtime-9.0-9.0.19-1.el8_10.aarch64.rpm d4c0305c0f574c85ac9ee6aac0608fb68681b177d1f0bf038fdf1f6243515c26
aarch64 dotnet-templates-9.0-9.0.120-1.el8_10.aarch64.rpm e96b9fbb3601ef08efd609d475967afd54922598645e1e397ec4da6cb99a28a1
aarch64 dotnet-sdk-aot-9.0-9.0.120-1.el8_10.aarch64.rpm f68ab347860f601c5ff5103085422c58800745565718b3b865e0a39de00a9d0c
ppc64le dotnet-apphost-pack-9.0-9.0.19-1.el8_10.ppc64le.rpm 0790d5f691bfe8a9ba997d90132f69295b237418de705190afc46fb30ac5534e
ppc64le netstandard-targeting-pack-2.1-9.0.120-1.el8_10.ppc64le.rpm 07e7c673fce9f85580f7adeb66702dfae1c35726b092acc30cd231052a3a938a
ppc64le aspnetcore-targeting-pack-9.0-9.0.19-1.el8_10.ppc64le.rpm 112cf9456e320d1d4eeb27d1e7ecac4d1fb6b6464742638eed5bad71383d3ac3
ppc64le dotnet-sdk-dbg-9.0-9.0.120-1.el8_10.ppc64le.rpm 2ac64f14f37e37848c9dfa98d490a0be2b822ac53514d87b21c1aa206a7a701f
ppc64le dotnet-runtime-dbg-9.0-9.0.19-1.el8_10.ppc64le.rpm 507b60b61df090b40f79e06bc75389ef5a65cf9f8db3c386f04cf0171b609881
ppc64le dotnet-templates-9.0-9.0.120-1.el8_10.ppc64le.rpm 54dd47aebc52a4616ba074a58c743912b0049c5c1602bc15eec7b6e880c52680
ppc64le dotnet-runtime-9.0-9.0.19-1.el8_10.ppc64le.rpm 629d6236f1a5b255af4eeb9d9c0c5faaa438e0fdd645facdd6c52a183ea81354
ppc64le aspnetcore-runtime-dbg-9.0-9.0.19-1.el8_10.ppc64le.rpm 74bd1ddd9f6e3b3005e157c84b71dc762cb1e6bc94ad150544325946368e5752
ppc64le dotnet-sdk-9.0-9.0.120-1.el8_10.ppc64le.rpm 8d1d36a1940fb76782df6d91992cd2d601ff68eb0344475a2efcd60652e8cb23
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el8_10.ppc64le.rpm afdbfe10e62a157b4ad12bb9e2b2d10e397168dc0f39a98fa07e46874ba51d88
ppc64le dotnet-targeting-pack-9.0-9.0.19-1.el8_10.ppc64le.rpm bd1e5e27eba85b0f49670e0e9ecefda7d01a1d798cb6ad82e679ea7a4d6e9709
ppc64le aspnetcore-runtime-9.0-9.0.19-1.el8_10.ppc64le.rpm c450057070a316834b51e2d03c5d060cec094d9a514e70bc7ae0257f118c1902
ppc64le dotnet-hostfxr-9.0-9.0.19-1.el8_10.ppc64le.rpm d446e0568b90c241e6d3711437adb267ef58bf30f021bb89e6ac0e40e72439dd
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el8_10.s390x.rpm 012a353cc138016619d5f4e482566844e4c552122b96a17c4130a03eb653782b
s390x aspnetcore-runtime-9.0-9.0.19-1.el8_10.s390x.rpm 35c5879740179fce56bda3f00cb3f66197291f9dff6ca23fbba62aa14f749be5
s390x dotnet-apphost-pack-9.0-9.0.19-1.el8_10.s390x.rpm 3753d13111bfce5905bb3ede16ed576b5103db72aafeb2d5e6ff7617641140b7
s390x aspnetcore-targeting-pack-9.0-9.0.19-1.el8_10.s390x.rpm 487e2f786b269f59dba2721880ddceeadbc2f881e754d565d33b8c2fc9ec0e83
s390x dotnet-targeting-pack-9.0-9.0.19-1.el8_10.s390x.rpm 5b3e529fa43777266a5962e22218ff58adeb964c5b990882cef5eccf2fc139f3
s390x dotnet-runtime-dbg-9.0-9.0.19-1.el8_10.s390x.rpm 6e9e93c8a4885db2dcf9c57aa0f76d1bfac7dcb55a64944903d94d841b45aeb4
s390x aspnetcore-runtime-dbg-9.0-9.0.19-1.el8_10.s390x.rpm 7fa6886f910f9bf48e4707aef537120fb57ce84dbddfa1d5144b80628c991630
s390x dotnet-templates-9.0-9.0.120-1.el8_10.s390x.rpm 86d79013dd3dff04af6cfc1e7ae9b07c6e897bd81212b02a7727fb78f686ef48
s390x dotnet-sdk-9.0-9.0.120-1.el8_10.s390x.rpm 9570d220ccb4514fcedc47937a5e6f0a66ea64a8b67520c162b0c0248d020e1d
s390x dotnet-hostfxr-9.0-9.0.19-1.el8_10.s390x.rpm cfaee5d30a9f03d903b732690cc509082f234fd7719bbc7e603837bf344c0e8a
s390x dotnet-runtime-9.0-9.0.19-1.el8_10.s390x.rpm d6b26500ba98e1d4f864c7896e626b7edb94099696e832c7b94efe6d9a365610
s390x netstandard-targeting-pack-2.1-9.0.120-1.el8_10.s390x.rpm defb7af3e8aaf6c89ba572ddb60f33e7f37339e0521c1306ba17d05e9449e4c5
s390x dotnet-sdk-dbg-9.0-9.0.120-1.el8_10.s390x.rpm f1b10a6bbfe56f0bf105b58ad02dae3bf9dc9f958c3979fe6d1769159239d449
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el8_10.x86_64.rpm 0b176779a05239d8f86efcbc7bcfdbb3b6c684b3727070e0d03a3f9dcc67b167
x86_64 aspnetcore-runtime-dbg-9.0-9.0.19-1.el8_10.x86_64.rpm 0f78e8b7bc9a0904de876182c3f2efd0960608c91f9666a4b2628dcb3bacb15e
x86_64 aspnetcore-runtime-9.0-9.0.19-1.el8_10.x86_64.rpm 198292060c83f5a96c219965f7d8ab1c09a20f850bf1b794afcca69a527ca725
x86_64 dotnet-targeting-pack-9.0-9.0.19-1.el8_10.x86_64.rpm 1f1435a16e3e4fda6a10542f5e3d378ec52005603cf8679a5bae40f1d371dc57
x86_64 dotnet-runtime-dbg-9.0-9.0.19-1.el8_10.x86_64.rpm 226ed5af2ad28f621f1a78b25e2fd88800f68642d40ce6354b7fb928970428ed
x86_64 dotnet-hostfxr-9.0-9.0.19-1.el8_10.x86_64.rpm 6930708f0a7c85a4c50132142e529d8fc6410702c29775937ce371f5af3bc2af
x86_64 dotnet-templates-9.0-9.0.120-1.el8_10.x86_64.rpm 9ad523f7316ac38cf1993017c700d1be9609dd55f75af30252ea5b0153348e0f
x86_64 dotnet-apphost-pack-9.0-9.0.19-1.el8_10.x86_64.rpm 9d356b4670d4f1247b6cbb02e5ae072c5a3b836a128ec5808f49b988d9f08a31
x86_64 dotnet-sdk-dbg-9.0-9.0.120-1.el8_10.x86_64.rpm a01075d3291387b0706850e83876a2eaae2a45e96bee9b5238cf006fe3d8ff90
x86_64 aspnetcore-targeting-pack-9.0-9.0.19-1.el8_10.x86_64.rpm a4eca74b76b710fb6ab10284cc1ba74e78c01d5d17cedf6b9684d94d0731f50e
x86_64 netstandard-targeting-pack-2.1-9.0.120-1.el8_10.x86_64.rpm b5ded57752b383cdfbad3c83a0bd07d2cf9929867797ae2717175b576a445eab
x86_64 dotnet-sdk-9.0-9.0.120-1.el8_10.x86_64.rpm b7024c2df6967e852b9c0ab720b93a034a5c9301285f1182d2ed14a6552c26d2
x86_64 dotnet-runtime-9.0-9.0.19-1.el8_10.x86_64.rpm bb6a3ce55a856ccd57735d4c518046b4c82c3f9ab98790cb0cfdc96086a5a9d2
x86_64 dotnet-sdk-aot-9.0-9.0.120-1.el8_10.x86_64.rpm f28d2119ce8a61fc957aecd429ec86e8992cda4e8a2012abeb93fa868acae071
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.