[ALSA-2026:8475] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-04-20
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es): * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171) * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203) * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116) * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 netstandard-targeting-pack-2.1-9.0.116-1.el8_10.aarch64.rpm 0790af2048e660f0969f56014debb65cfde783d924e940d856abe91cf863076a
aarch64 dotnet-sdk-aot-9.0-9.0.116-1.el8_10.aarch64.rpm 0e5afe3e7d53100533e71d797de25aa2f84e8a4253d72448f5ddbe3e05a3fa6c
aarch64 aspnetcore-targeting-pack-9.0-9.0.15-1.el8_10.aarch64.rpm 1dc152de818b8cae3934576708c0587dac6377c592b59ae4f2026cb7de55e122
aarch64 dotnet-templates-9.0-9.0.116-1.el8_10.aarch64.rpm 2746ab0bdde2ccc2df9df4caa2f92721dc1361049d37ce4b4f9ce0ed1c47b4ef
aarch64 dotnet-sdk-dbg-9.0-9.0.116-1.el8_10.aarch64.rpm 48e71c8812c9028cc83af46e9f6f5990234d6e7dce9dbaa7f3c1296c52c102ff
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el8_10.aarch64.rpm 4c35aa6c7f4a2d09bec2e0b35845f87e2ac0aee814c6dbeff59c279ec8c03ce7
aarch64 aspnetcore-runtime-9.0-9.0.15-1.el8_10.aarch64.rpm 4e01f5900b710e13d3f92d9b69023e3465419cda95fd9d7449bf9583cf4fe362
aarch64 dotnet-hostfxr-9.0-9.0.15-1.el8_10.aarch64.rpm ba21e8cd2a3e07d4c0d4aeac8afe3b375def2743a09da98f544e06723b967e6e
aarch64 dotnet-sdk-9.0-9.0.116-1.el8_10.aarch64.rpm d837cdc49034f1a22b4f59f7c1780bea6287e965d4e027c062f0aa8136ce4be4
aarch64 dotnet-runtime-9.0-9.0.15-1.el8_10.aarch64.rpm d9b1025e4a36882bf623e62e1026dbc941a7c537cad6af00c31c66af0860c3f1
aarch64 aspnetcore-runtime-dbg-9.0-9.0.15-1.el8_10.aarch64.rpm f8885a666574fa04d100c916d011f6b379ac7984f60f8e3addc07b0d7927eda0
aarch64 dotnet-runtime-dbg-9.0-9.0.15-1.el8_10.aarch64.rpm f9f63fc24c5fa279a304956befcee918beadf02c9da946af0fc9f1bfc058a6c3
aarch64 dotnet-targeting-pack-9.0-9.0.15-1.el8_10.aarch64.rpm fcd2322748c4cc2b6fd265ebf8200aeb4e5264317d9fc1f91f707f30b38e75b7
aarch64 dotnet-apphost-pack-9.0-9.0.15-1.el8_10.aarch64.rpm fe6780bcbfabbd8a1f13a33542565d6566fa168beb963e5e3c9e727d2a6dee67
ppc64le dotnet-apphost-pack-9.0-9.0.15-1.el8_10.ppc64le.rpm 0e0442db94f5b00e4a588f632a5c47b1fe3247df41a07bda15e8376a117e2067
ppc64le dotnet-targeting-pack-9.0-9.0.15-1.el8_10.ppc64le.rpm 6a02214623b77eac5de04e769a78ee8698934ffe6ef830c7f676ac41bf5896d4
ppc64le aspnetcore-targeting-pack-9.0-9.0.15-1.el8_10.ppc64le.rpm 6f36c8fe53f661e25e9da63ad9a76dd6e9a71ce9834c6e61a8a40aa25f20a5c9
ppc64le dotnet-sdk-9.0-9.0.116-1.el8_10.ppc64le.rpm a92c1c806c336c448a9fce1d198a7a253db2006fae4da61a6965c86238627bdd
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el8_10.ppc64le.rpm acabd0f5d555037e3f2cdd787718afc82fd97ec9e3ddb36d62718623d9103d42
ppc64le dotnet-runtime-9.0-9.0.15-1.el8_10.ppc64le.rpm b27d5f9e8d89ce69f07e26fe9c31a462f40055f39fd9db52932510299ffc04e6
ppc64le aspnetcore-runtime-dbg-9.0-9.0.15-1.el8_10.ppc64le.rpm c6256f218c20d1f3dc11df39fe19c0df50e843dee7608efdc570c36b2fc201b7
ppc64le aspnetcore-runtime-9.0-9.0.15-1.el8_10.ppc64le.rpm e710cb2c2e2b56ca031f33cc28bcd70d8e8c08769655bb91bf1e2b08806f3d3e
ppc64le dotnet-runtime-dbg-9.0-9.0.15-1.el8_10.ppc64le.rpm ed8cdb04c2898573ccd1c5aaa318e9a81fb21363b1173ef07ef1bd27bef6d10d
ppc64le netstandard-targeting-pack-2.1-9.0.116-1.el8_10.ppc64le.rpm f35b42e6e534e0731b7fe8f0cd8c7ff32a9442d130f78d15498714ec8bfa89ec
ppc64le dotnet-hostfxr-9.0-9.0.15-1.el8_10.ppc64le.rpm f5bf43298f8299cee8e9945611ff1b9445a4b9faafa73f91846cc933b69f87c8
ppc64le dotnet-templates-9.0-9.0.116-1.el8_10.ppc64le.rpm fa194e654b4b312be1faeda2e8f91b252cec8cb69ee25d1e3a00cac77dc9e745
ppc64le dotnet-sdk-dbg-9.0-9.0.116-1.el8_10.ppc64le.rpm fe2b468cd4b04952f8134771d6ba318ae1750751e2ba0a22f0a8ae516224f400
s390x dotnet-templates-9.0-9.0.116-1.el8_10.s390x.rpm 09855f594b234ac368df88a34412726989a28324cabec69dd573236a5e04ed44
s390x dotnet-targeting-pack-9.0-9.0.15-1.el8_10.s390x.rpm 26d8afa9461dcbd480fa16e1684b650ae860243aade0ba969bc6efffae70099d
s390x dotnet-sdk-9.0-9.0.116-1.el8_10.s390x.rpm 3b8a52f64bd8a8c4c7be226d0e7779b67085edcbc84c13c30801c1c1e8e62bd6
s390x dotnet-runtime-9.0-9.0.15-1.el8_10.s390x.rpm 5296768c1921a637c095b0328bc25dd840e742b6e266c506dc018dcfcf1b3f3c
s390x aspnetcore-targeting-pack-9.0-9.0.15-1.el8_10.s390x.rpm 55188dd5b6263ccc9d54d29d750751cf2ad3bd2c06e8d54243b8a126230cedc4
s390x dotnet-sdk-dbg-9.0-9.0.116-1.el8_10.s390x.rpm 57927e4cc86e262b941a39ce559e820297b55b82f7ce5a5ca9dee385510f5c6f
s390x aspnetcore-runtime-dbg-9.0-9.0.15-1.el8_10.s390x.rpm 732421daa8132e46488ffa258263cb9854b9a0582806489a280257762672aee5
s390x dotnet-runtime-dbg-9.0-9.0.15-1.el8_10.s390x.rpm 7327c6bd65d695830505fe0da6d4942e927c3ca6546b11fd65333ed1fc3cee6e
s390x dotnet-hostfxr-9.0-9.0.15-1.el8_10.s390x.rpm a7f642707949735e09d15bdd548aaa1296c44c0b93fd454eb5df57197b08458c
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el8_10.s390x.rpm c1389e334516ef8593da3428cdb4c9274e056e1f15769dd682cffe8aad4adbf1
s390x netstandard-targeting-pack-2.1-9.0.116-1.el8_10.s390x.rpm eda01c99e46827a6a28801aee265a7fe320e2b1b6c322b029ad93cdee8ad366f
s390x aspnetcore-runtime-9.0-9.0.15-1.el8_10.s390x.rpm fd759c71e72954ba1adae15c0ac6cf68d3a10f32d5e136657fe64a9da9b3643c
s390x dotnet-apphost-pack-9.0-9.0.15-1.el8_10.s390x.rpm fea67b4f9a519f0d4dbd2ca3f0c367567750e97d48ea6da1e538456f47237328
x86_64 aspnetcore-runtime-9.0-9.0.15-1.el8_10.x86_64.rpm 0cd901b1ca661ba94e637fbe727c7ac04453f7059cd945956b71d14ad272cea9
x86_64 dotnet-runtime-9.0-9.0.15-1.el8_10.x86_64.rpm 25e7057ab54eb381d926dde5b8990dfd9edfe44a22280b8369879f149967c4ed
x86_64 dotnet-hostfxr-9.0-9.0.15-1.el8_10.x86_64.rpm 2961eb676bda741eb99ac038bad134bd6f43331fd6c3f155396f019604460503
x86_64 dotnet-sdk-dbg-9.0-9.0.116-1.el8_10.x86_64.rpm 329822ee385d3367ab1384681ce60b1ffd886d9941684b36977371773817efa8
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el8_10.x86_64.rpm 3fa546395ffe7554a1c149a34dc07725e3eebb437a94e458527574e4e4cf7e52
x86_64 dotnet-templates-9.0-9.0.116-1.el8_10.x86_64.rpm 40710373caaf4e32e67dee5702cf34b6f3434267cbe520942d4c93bd33d1c63a
x86_64 dotnet-sdk-aot-9.0-9.0.116-1.el8_10.x86_64.rpm 4c450f259b424e3ad36f32542b4130e5eacd443a0697b874edccc37e51ad9317
x86_64 dotnet-runtime-dbg-9.0-9.0.15-1.el8_10.x86_64.rpm 6a45b04f5ad96f28e6eaf66c249bcaa2df9eb5dbc014c384b18a3008e3b5b7e2
x86_64 dotnet-apphost-pack-9.0-9.0.15-1.el8_10.x86_64.rpm 749a5a41adac2d6ede0e0db6d025c5ac168f6a53ff0cfb3e93de527cd586d690
x86_64 dotnet-targeting-pack-9.0-9.0.15-1.el8_10.x86_64.rpm a63c0397cd0538a4131b1b025e5caa7ab54524824df9f7a350ec78eb49ee51bc
x86_64 aspnetcore-runtime-dbg-9.0-9.0.15-1.el8_10.x86_64.rpm ae5f255a1972b83909f0666e70848a8ef123f318478b01a78a87ddacc2ab3cab
x86_64 dotnet-sdk-9.0-9.0.116-1.el8_10.x86_64.rpm c5dc27546e3f9e828c249362e0977e39f9b053acf7b52506348a9339c97be2e0
x86_64 aspnetcore-targeting-pack-9.0-9.0.15-1.el8_10.x86_64.rpm d9212a29bac540dc9fb5c03a120b3fb27277a1f7b0b00c14129b5b7d6a324e03
x86_64 netstandard-targeting-pack-2.1-9.0.116-1.el8_10.x86_64.rpm fdc71f3b8676c306f132e41213b9ff79c594bda98308fd3aab06dc00fdd1274a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.