[ALSA-2026:99051] Important: .NET 9.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-11-12
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.124 Runtime version: 9.0.23 Security Fix(es): * dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476) * dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544) * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475) * dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146) * dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147) * dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.124 and Runtime 9.0.23 (JIRA:RHEL-302540) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-runtime-dbg-9.0-9.0.23-1.el8_10.aarch64.rpm 09a9821cfc529ef9a1aaabce8e3bffeb71dc52197d1826bd4c66c8eec9cff762
aarch64 dotnet-targeting-pack-9.0-9.0.23-1.el8_10.aarch64.rpm 16684a78b92f760ae5562b47463dc119e035966a5b1844aa57edaa6114b4aeb8
aarch64 aspnetcore-runtime-9.0-9.0.23-1.el8_10.aarch64.rpm 262acbc1eb0d89b2e5d04620ce1fb6a9e5f25e86802785a886bf20a0b5dc743d
aarch64 dotnet-sdk-dbg-9.0-9.0.124-1.el8_10.aarch64.rpm 38d2eba8a1ffda2f19af0cedba1cd3efd1e4507857d00bccf5150602706c6497
aarch64 dotnet-hostfxr-9.0-9.0.23-1.el8_10.aarch64.rpm 47c5ef36f0062d8f277bc5f62cbe67c5ce47aefc2d417b9db4209f63c39653c3
aarch64 netstandard-targeting-pack-2.1-9.0.124-1.el8_10.aarch64.rpm 568bd9a8aec9f8ab7be9d88389701c2e304dbe31628b6b81d875c7b12afeb0bb
aarch64 dotnet-sdk-aot-9.0-9.0.124-1.el8_10.aarch64.rpm 71e0342332e4cd16106e88d847f5a1eadb55e0d35c524ba48dc4da4d22980b70
aarch64 dotnet-runtime-9.0-9.0.23-1.el8_10.aarch64.rpm 7acaa4d21d0088424045f1ac17dce1cd3897008a712d496dfba9ef9fdef41331
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.124-1.el8_10.aarch64.rpm 9f87379ca7b0115439ec60b27a1767602b4acf9444ae38deb79fe221df31fdfc
aarch64 dotnet-runtime-dbg-9.0-9.0.23-1.el8_10.aarch64.rpm b7a60438ba17cda2e90b1344b54bb31a95b5e0aaf25a3d5a07ef7334b6df10d9
aarch64 dotnet-apphost-pack-9.0-9.0.23-1.el8_10.aarch64.rpm beb34ff7d843db2fab87424d24d5f4e285dd6feb00d786ddb11e1d8c4c32e1b3
aarch64 aspnetcore-targeting-pack-9.0-9.0.23-1.el8_10.aarch64.rpm d6ea801f252b2bb2c35de1f63916ce17cc2ab590e84f855753b8ca31c2398f9b
aarch64 dotnet-templates-9.0-9.0.124-1.el8_10.aarch64.rpm f046f95f3d99a0601935d92fc895e6ea861c8339202f28bf00b4899365a1b42f
aarch64 dotnet-sdk-9.0-9.0.124-1.el8_10.aarch64.rpm f16abb03f0eb476c57099f49b318208a851f0ba56d4f1e1368f8b1affe823b44
ppc64le aspnetcore-targeting-pack-9.0-9.0.23-1.el8_10.ppc64le.rpm 06bed2016c526491a246b3d54fb4a90b631e22502547a56d1acc1cad0da6afe3
ppc64le dotnet-templates-9.0-9.0.124-1.el8_10.ppc64le.rpm 433d9bec020db471d391bb9ac42d94eb93eaddf452e1adbc154732837e5bbc1e
ppc64le dotnet-runtime-dbg-9.0-9.0.23-1.el8_10.ppc64le.rpm 4706a26d0895516170cf9c96e665d3008aeb6c77ae586bd6f836baf418700987
ppc64le aspnetcore-runtime-dbg-9.0-9.0.23-1.el8_10.ppc64le.rpm 4f9e5b8438772459b4d217c7b843ff88d6d210872e029e81db6a82e58c5c671c
ppc64le dotnet-sdk-9.0-9.0.124-1.el8_10.ppc64le.rpm 65c988c2643a65be8737cc02248adc21d13c7047ee53d85111be11c75c049364
ppc64le dotnet-hostfxr-9.0-9.0.23-1.el8_10.ppc64le.rpm 6fa079f84c26b262c3409985d46a3edb26a6278981cdd97d62692f524b307cd4
ppc64le dotnet-runtime-9.0-9.0.23-1.el8_10.ppc64le.rpm abd0b64d65094ecfcdc13d8ce2e232ea7b2cbda2ff8ce5a4107bc4d1ade4e84f
ppc64le dotnet-apphost-pack-9.0-9.0.23-1.el8_10.ppc64le.rpm b45d2728a3eb9fe74daf2b390c3b3649cdaca1e951bf37294a2dc45440d1b4c2
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.124-1.el8_10.ppc64le.rpm d2e31d4c7d6a9e9253a7c0b01aea18df8c6179687cf1125ea4da2ca142620ecb
ppc64le dotnet-sdk-dbg-9.0-9.0.124-1.el8_10.ppc64le.rpm d34f0c9b1d76b54db9ba3cd890523fff1d07622d62b408cadfebad3289f35c33
ppc64le netstandard-targeting-pack-2.1-9.0.124-1.el8_10.ppc64le.rpm d4721c6ca2c0886b87f04a6cbbf3bd9b07b8305f4e7571cab3cf6ae018b154bc
ppc64le dotnet-targeting-pack-9.0-9.0.23-1.el8_10.ppc64le.rpm eb32d14991aa7d56170ff1bce94b31d7636e9cadbd3e22c286e52fc2c7e8b691
ppc64le aspnetcore-runtime-9.0-9.0.23-1.el8_10.ppc64le.rpm f86c81367afa8bec5b4f008a8d48993b84ac2cc132994758a231b37fd8acc7cd
s390x dotnet-runtime-9.0-9.0.23-1.el8_10.s390x.rpm 15ad624e94f95e7bcbd74f5cf2c368a88e3fe58d7c21d0fb21d0507caf1e77f1
s390x dotnet-hostfxr-9.0-9.0.23-1.el8_10.s390x.rpm 18abfa932e67ce16f7767db202b8e1f13cf886d8858bbc24879beaa4e767cb62
s390x dotnet-runtime-dbg-9.0-9.0.23-1.el8_10.s390x.rpm 2341a79b6c0c0a9e50fde35c3844648a14028b818a88941b13b0d73b6203b93e
s390x aspnetcore-runtime-9.0-9.0.23-1.el8_10.s390x.rpm 3f838e95b594dedff7fcf0a875388ef0a42f3bb9141725510877bd8350a8551b
s390x aspnetcore-runtime-dbg-9.0-9.0.23-1.el8_10.s390x.rpm 85b908acb0f1ef3a845a3d693120d2d84986d71a0ce7b7c538374b4e929b744e
s390x dotnet-templates-9.0-9.0.124-1.el8_10.s390x.rpm 8dbf1be27cce93f8bdae9b07c132e64a57ebdbdbff713f3c7471ffc5745430ea
s390x dotnet-sdk-9.0-9.0.124-1.el8_10.s390x.rpm a5abe195c96725624f7127bd0187b40f65d67171397f85d0de723760aaec4906
s390x dotnet-targeting-pack-9.0-9.0.23-1.el8_10.s390x.rpm a5ea228bf806fddf8bb538e087fdaf407ad3109a9d9f022d1eb91ddd5833bbb5
s390x dotnet-apphost-pack-9.0-9.0.23-1.el8_10.s390x.rpm bbd5b2a653e31cceea52aac33e0a37000a3c143429187aa54887a41093eaf205
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.124-1.el8_10.s390x.rpm bc448e4118a8fe32c9b341ead75e49416e57db5748b6e4057ee73008d0e6f56d
s390x dotnet-sdk-dbg-9.0-9.0.124-1.el8_10.s390x.rpm be9256e50a662c2cd43cb561ca92255d61c8ca70881f837b19a70ceb3d90ba04
s390x netstandard-targeting-pack-2.1-9.0.124-1.el8_10.s390x.rpm c16e9181cef9476ba025ad349b2438d482bd0efb2816cd0b55f2942c359a7834
s390x aspnetcore-targeting-pack-9.0-9.0.23-1.el8_10.s390x.rpm e81ce2db0239b9ddd7372153c081b05f78cca1d7e5137108e0988b7e11b8fb12
x86_64 dotnet-targeting-pack-9.0-9.0.23-1.el8_10.x86_64.rpm 0406244c827090b614564961b9f68399dc5a8f02ed86ade1e2aa9c89be16f458
x86_64 dotnet-sdk-dbg-9.0-9.0.124-1.el8_10.x86_64.rpm 1071e9e737d4b596513d4499c5e10b7ce8a8c3d68c0bf7e9c214ba8450299f87
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.124-1.el8_10.x86_64.rpm 1169344226916d15fd910a0170bf0cd3156dcde54c5a215ca447beea2e489511
x86_64 aspnetcore-runtime-9.0-9.0.23-1.el8_10.x86_64.rpm 5c4294a5aac855d5e4b51917f39eca6ebeecff6d3c4d7e34d98347243ccea154
x86_64 dotnet-runtime-9.0-9.0.23-1.el8_10.x86_64.rpm 5f649276355cf6e6fa459906bcdc1eac20325f1b85146eff06b2a054dec74454
x86_64 dotnet-hostfxr-9.0-9.0.23-1.el8_10.x86_64.rpm 62218a079e9f58c655d03a9625e1da5e6976e7b4004b49f67bd620124510b3b8
x86_64 dotnet-sdk-9.0-9.0.124-1.el8_10.x86_64.rpm 64b30bd7232d757537b60a3f004731326f946aa11681722078cf8b04cd641c25
x86_64 netstandard-targeting-pack-2.1-9.0.124-1.el8_10.x86_64.rpm 7d27979a6ff0a56c60b2895bdff6013ebeeaae2a265a06ac944bf4dc8f49501f
x86_64 aspnetcore-targeting-pack-9.0-9.0.23-1.el8_10.x86_64.rpm 81d14c49539a4a0ae9eca0d5de2a8d5d01cd3e61f0fb51d80b86183f13031bf5
x86_64 dotnet-apphost-pack-9.0-9.0.23-1.el8_10.x86_64.rpm 82ce1154918a37a8b1cd6db36e792abb6021e59e15436d99d40c693db805966c
x86_64 dotnet-sdk-aot-9.0-9.0.124-1.el8_10.x86_64.rpm 851524196ec9e0cd17450de2213af1a48f6a448f38d51635a90e7ea1fa245e53
x86_64 dotnet-runtime-dbg-9.0-9.0.23-1.el8_10.x86_64.rpm c351b9e1aee468a8cd7c0842fdc13a4caa894b2f0d9446b08040b12fefc76d0f
x86_64 aspnetcore-runtime-dbg-9.0-9.0.23-1.el8_10.x86_64.rpm eadf60cdf0d941da5f9282c49a84e89fd1fe543b21bc2ff54a7a15dea9d2832e
x86_64 dotnet-templates-9.0-9.0.124-1.el8_10.x86_64.rpm ed188888265265d8bc48fa020df34e8d4e303920478cff36aad196e1fd770633
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.