[ALSA-2026:92427] Important: .NET 9.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-10-31
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.123 Runtime version: 9.0.22 Security Fix(es): * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 (JIRA:RHEL-291723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-apphost-pack-9.0-9.0.22-1.el8_10.aarch64.rpm 273d6ead3b9f670b1857a6742863da2b63637d9d91aa5fd9d15c33868f8bb7e5
aarch64 netstandard-targeting-pack-2.1-9.0.123-1.el8_10.aarch64.rpm 2fe7b9de328463745a338160b9b21d31b0fe8a6e85c116791a0772b3a94af5c4
aarch64 dotnet-sdk-dbg-9.0-9.0.123-1.el8_10.aarch64.rpm 4e8382fd7807cee2df19e08051e413e9c09bf3658b296f1244444f7403a81639
aarch64 dotnet-targeting-pack-9.0-9.0.22-1.el8_10.aarch64.rpm 4f07ce87218ad3e91f0c4cdd64108a485dd6f48dc801a1484a5771823e008e6f
aarch64 dotnet-sdk-9.0-9.0.123-1.el8_10.aarch64.rpm 75a31e28ad4bd09e6dca0aef496ac9f4e9e391a3a285f37fe187945d553e9189
aarch64 aspnetcore-targeting-pack-9.0-9.0.22-1.el8_10.aarch64.rpm 7de785211d617d1e2610c3b10b305f7d14351980d9545b4cfc79455c19b993a8
aarch64 dotnet-sdk-aot-9.0-9.0.123-1.el8_10.aarch64.rpm 9518566204cbb616049902bcf719f7d2c36bb7f8df3b443c8ec3debf10265978
aarch64 dotnet-runtime-dbg-9.0-9.0.22-1.el8_10.aarch64.rpm a6cd6c6c21d45f1a0fd555592e76b783cff91ea12cad23b9084725dcd476a5b4
aarch64 aspnetcore-runtime-9.0-9.0.22-1.el8_10.aarch64.rpm b96eda1854a3aa9b145dbc3f7b379f0f7d3fda5aeb6ffdce7f47e007a28c3d9d
aarch64 dotnet-runtime-9.0-9.0.22-1.el8_10.aarch64.rpm c17669e7df38161ad081eaec2318ff5759cf0c0cf1b9ddd742bd9f600c359801
aarch64 dotnet-hostfxr-9.0-9.0.22-1.el8_10.aarch64.rpm c462799f21d0852a237300e42b6cacdecb0aa14bf77f2a4fb4c7fdbe2a5702de
aarch64 aspnetcore-runtime-dbg-9.0-9.0.22-1.el8_10.aarch64.rpm cdf8415e832205c6b884ba36949839b9cc6e6b4b1b728d61b7f862350221bbbe
aarch64 dotnet-templates-9.0-9.0.123-1.el8_10.aarch64.rpm d1b54cd83617c73b1cafe62c0a6362f887fff257015f0a1aef06acc0cb849ec6
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.123-1.el8_10.aarch64.rpm e94b31de6211b07a8d6f5855e58a798af665fa81059afed174d0fdbf28d7342a
ppc64le aspnetcore-targeting-pack-9.0-9.0.22-1.el8_10.ppc64le.rpm 05a34c41d9daf379aa882b447f97e6034986bb4e80c52e63d941f21313c396d1
ppc64le dotnet-templates-9.0-9.0.123-1.el8_10.ppc64le.rpm 1f3bfb199d7afab7c34a242e7422278bee59d4930c61bb560237138264275784
ppc64le dotnet-apphost-pack-9.0-9.0.22-1.el8_10.ppc64le.rpm 203f84a5933fbff792c2fa690dd28ec5af45205c0cb80072d8e800e464198a84
ppc64le dotnet-targeting-pack-9.0-9.0.22-1.el8_10.ppc64le.rpm 3e08279ed445a4177aea96f92c3857736fca2482b521f9c1c9017d38ec9e739c
ppc64le dotnet-runtime-dbg-9.0-9.0.22-1.el8_10.ppc64le.rpm 466c524bb748f089b3c116ab0db7e028a5af3ea4ab840a1ba014be2f3b89c0d8
ppc64le dotnet-hostfxr-9.0-9.0.22-1.el8_10.ppc64le.rpm 6f15b20e838805ed807691a7038ad2da548a8c3effc3773973376ffb9314d3c5
ppc64le netstandard-targeting-pack-2.1-9.0.123-1.el8_10.ppc64le.rpm 7a7693b104e612dec4f785aaa17143680cce802088b6b26d49b85006b23d899c
ppc64le aspnetcore-runtime-9.0-9.0.22-1.el8_10.ppc64le.rpm 97f117eb3539db42789788173015fce38e5ab5c423f8443d899476ce9a65944b
ppc64le aspnetcore-runtime-dbg-9.0-9.0.22-1.el8_10.ppc64le.rpm bb5d5d481c04b6b6397ba8691ec07d3138cc35813a5978da61df10a66a3c4e5a
ppc64le dotnet-sdk-dbg-9.0-9.0.123-1.el8_10.ppc64le.rpm bf3f490ce35178ece9eda0d2d7414dd17061349c6bb36acecd4ce4412a6b5886
ppc64le dotnet-runtime-9.0-9.0.22-1.el8_10.ppc64le.rpm c78dd3af3e1e96a13b43d59d46cc804f1070d81acb490b24b9fb153299551ea0
ppc64le dotnet-sdk-9.0-9.0.123-1.el8_10.ppc64le.rpm ec4ea4e834d590aec597dc9dcab3bedf56bd2c70215e71b0edd5093309f10900
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.123-1.el8_10.ppc64le.rpm f73b97810d633aed09e2d9dd33d1d8f29f9fed011d43869859c9b80fdd628e23
s390x dotnet-templates-9.0-9.0.123-1.el8_10.s390x.rpm 15607c05025b19b05b0b33e01f105087419696b08071aef0fc8a73c15880d687
s390x aspnetcore-runtime-dbg-9.0-9.0.22-1.el8_10.s390x.rpm 28bb6aabfec4689a4952bcdc1c9de62684b2b8bd4571a8e93301b608de9bc0fc
s390x aspnetcore-targeting-pack-9.0-9.0.22-1.el8_10.s390x.rpm 2a675f37bc1ad4e0744d23826d2f260e3ff63deeba3d3bbd80ec371947fbb5e6
s390x dotnet-hostfxr-9.0-9.0.22-1.el8_10.s390x.rpm 411f76f8ad185809ce99ce6b4639502c8b9ff728b7f3b338ddacf30f73931f00
s390x aspnetcore-runtime-9.0-9.0.22-1.el8_10.s390x.rpm 4ab12145f048f6f2ea7c9c461fa058dd8a40cdb8c0506a4fff957591df49a181
s390x dotnet-apphost-pack-9.0-9.0.22-1.el8_10.s390x.rpm 6aab43041cec3898caf57e6ec3fc7cf3423ed46004b86812793458c4463fddb9
s390x dotnet-sdk-dbg-9.0-9.0.123-1.el8_10.s390x.rpm 6f91ee8c306866e02aba1092fc1d8d8356b6705cc39e713a98a7db157fe544f4
s390x netstandard-targeting-pack-2.1-9.0.123-1.el8_10.s390x.rpm 7184e3ed078f61432399d649b8333ee3e3c8b513452896ce0c184b9b3cf5f00f
s390x dotnet-sdk-9.0-9.0.123-1.el8_10.s390x.rpm 7a2afe94b22c544588ff916f7e128af35bbbd43fe6e351961f7641402a5fb813
s390x dotnet-targeting-pack-9.0-9.0.22-1.el8_10.s390x.rpm 88c76dfc02b634b90a151b1adf8ce608735db115eb9c465b6b40e6dc1009ce15
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.123-1.el8_10.s390x.rpm ae33d1d5c9fb78c0b7ed4f1751df58e092660120cc186f64d57884fe844ef75f
s390x dotnet-runtime-9.0-9.0.22-1.el8_10.s390x.rpm e40a8fcf1f9a163bb4bb917dd62f263311892970cc610cad1bb6b02dad671fd2
s390x dotnet-runtime-dbg-9.0-9.0.22-1.el8_10.s390x.rpm e7d242ebfd7e40132a973865b07fc9902f81afee853f3af2e16c23354e8ce2bf
x86_64 dotnet-runtime-dbg-9.0-9.0.22-1.el8_10.x86_64.rpm 194bff01c5d9adf70360813e808132db9503c6ac63061d6fcaf049ab8330e4a8
x86_64 dotnet-hostfxr-9.0-9.0.22-1.el8_10.x86_64.rpm 1c89b8f87b6f516bf29e2869f8e64c94023f7555828cee0439f553a2c6d1d033
x86_64 aspnetcore-runtime-dbg-9.0-9.0.22-1.el8_10.x86_64.rpm 36d9bbc4dd7e75a85e0f3f2dbb03c9003edcbfc9fa43c67c9376ca16c964ec78
x86_64 dotnet-sdk-9.0-9.0.123-1.el8_10.x86_64.rpm 46e1cfe88ae7635aa6d71da541daf99256adb699aa415b4bd99bac7a583cc8aa
x86_64 dotnet-sdk-dbg-9.0-9.0.123-1.el8_10.x86_64.rpm 4d399d522f6ea394e8a90021d09b8d5cd1b30f473abf3483253e1575853eda0c
x86_64 dotnet-templates-9.0-9.0.123-1.el8_10.x86_64.rpm 7bb9099d44d4d3e4c0150eb299eff33999e2a43da6ee407c2e4b13d5dac165bc
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.123-1.el8_10.x86_64.rpm 839b3cd21745ff8379cce1ec86b030c92c0c36c96f8c108f62459f4dcf407417
x86_64 aspnetcore-targeting-pack-9.0-9.0.22-1.el8_10.x86_64.rpm 94b53fe7ab574020a9a9fb2d4aa64595f0535578c78c921a0f399fea00c9f55f
x86_64 dotnet-runtime-9.0-9.0.22-1.el8_10.x86_64.rpm 9a406fe03bccc58f298baa566cd28dc5329471f4ca8a20160e8e06c9db29f01a
x86_64 dotnet-targeting-pack-9.0-9.0.22-1.el8_10.x86_64.rpm a5fea1bbcdcbd2bc490e80b568fe5431f6d697588edc11807b9dcdca62da61e1
x86_64 netstandard-targeting-pack-2.1-9.0.123-1.el8_10.x86_64.rpm d52077fe89b1f1334cae2a36fc220e13edc77e2868017a84543dd4060120627a
x86_64 dotnet-sdk-aot-9.0-9.0.123-1.el8_10.x86_64.rpm e3b4a29f206f1b6b9525dcf5458592fbee03c05799e84a764f78401081249f85
x86_64 aspnetcore-runtime-9.0-9.0.22-1.el8_10.x86_64.rpm eb6b5c7f67692d085fa85dd5ae059b441643c17c81dbefe342ee55697f48e5c4
x86_64 dotnet-apphost-pack-9.0-9.0.22-1.el8_10.x86_64.rpm edf1d13bbd3fa4b56f604fed31a29f0fa84f745626f12d2442359c78d53e81eb
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.