[ALSA-2026:21296] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-05-29
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es): * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 netstandard-targeting-pack-2.1-9.0.117-1.el9_8.aarch64.rpm 01eff4f1bc0270918015597801b0b0a2c776ed4bbffd3150206fcfa07290fdac
aarch64 dotnet-hostfxr-9.0-9.0.16-1.el9_8.aarch64.rpm 04172077a0ecbe39ee932ecb7b810237b18c7c3f3038c3c4800dfecdd9a3121f
aarch64 dotnet-templates-9.0-9.0.117-1.el9_8.aarch64.rpm 1d7c2cb59bd4f41d34cd4ef3f3d25a8e9f952da1efec56665219c231f70615be
aarch64 dotnet-runtime-dbg-9.0-9.0.16-1.el9_8.aarch64.rpm 2d41c03d616f59896accb7763347c6b7a2eec9fbd14f5cfe0ba078fe80198a47
aarch64 dotnet-targeting-pack-9.0-9.0.16-1.el9_8.aarch64.rpm 36624ba0285bea2463384935474b336e361a23b6bb5e1d669a38750ffaecb8a9
aarch64 aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_8.aarch64.rpm 6599cc95c94d4e28945d1db7a2aa25194b9f5b524af3a0ff02c443da0ced9670
aarch64 aspnetcore-runtime-9.0-9.0.16-1.el9_8.aarch64.rpm 6621d219d639e9c100a9c1a7bf3b4cdc196b73371d9c959ec502da593071429e
aarch64 dotnet-sdk-aot-9.0-9.0.117-1.el9_8.aarch64.rpm 672b34d64b5ac2efd0d74b931b740aaf3c6b0c10bbaed9f66321ed531679466e
aarch64 dotnet-sdk-dbg-9.0-9.0.117-1.el9_8.aarch64.rpm 7d7dabd04b168ab2dca194e43687a18e8a0896e650395dd8413c0f8d0dd6e8a1
aarch64 dotnet-apphost-pack-9.0-9.0.16-1.el9_8.aarch64.rpm 987c98f5d78baf0cd4972aa78d0f4e9bd51b9611a15924945d15a481fe988060
aarch64 dotnet-runtime-9.0-9.0.16-1.el9_8.aarch64.rpm aeafb99972c8394106939034bc3968f2b9e1baaf701538ca0d74d7585227e383
aarch64 aspnetcore-targeting-pack-9.0-9.0.16-1.el9_8.aarch64.rpm c16027a31c36310e9dcf04e4b92d71022c34db977c305600721cb03e34601943
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el9_8.aarch64.rpm cbfdccceec498b42916dac3499e6a9f7444c3625d02010969529b7b4800998d0
aarch64 dotnet-sdk-9.0-9.0.117-1.el9_8.aarch64.rpm da8c219cd520c4a80f165d44226db4068d703a02136003790958caa1f537f960
ppc64le aspnetcore-targeting-pack-9.0-9.0.16-1.el9_8.ppc64le.rpm 0644d72d600e4c1fdc2f6faadd3a8c9e079b0d10d5675ac943581e0ef1e3f4a5
ppc64le dotnet-runtime-9.0-9.0.16-1.el9_8.ppc64le.rpm 153e0a2e288c747c690788bb015a7b0529f8ef37741c413286f48c0db35f2f23
ppc64le dotnet-sdk-9.0-9.0.117-1.el9_8.ppc64le.rpm 173371de7c087feb88872924accc2db044e554a15ea23741eef078a8ce5ff428
ppc64le netstandard-targeting-pack-2.1-9.0.117-1.el9_8.ppc64le.rpm 17fdc41dc828bc3e7c9fa5026d0d28cc1df79d34456eb3ca7c2e94085c44971a
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el9_8.ppc64le.rpm 2d4ade2e70a0d6519cdb9fe8bac0c0604a5424d0e58f0f96f1d811029a234da6
ppc64le dotnet-targeting-pack-9.0-9.0.16-1.el9_8.ppc64le.rpm 3877102416141881f013bb427e2a93bf5dc100404dc457a4ed64ca52988e094e
ppc64le dotnet-runtime-dbg-9.0-9.0.16-1.el9_8.ppc64le.rpm 3e2bd470069b347af8c4fac5c63cf22466d8f3374f9234d248a879e5380f69a1
ppc64le dotnet-apphost-pack-9.0-9.0.16-1.el9_8.ppc64le.rpm 60cc0af28e17da943c1c2fcdb2a2a095e9906da8bbf4c0ad5bf2977b76b6538a
ppc64le dotnet-hostfxr-9.0-9.0.16-1.el9_8.ppc64le.rpm 74f640528799fa6cf29f5a105516275c6a5827610b343af04f9f88fe430e1ba9
ppc64le dotnet-templates-9.0-9.0.117-1.el9_8.ppc64le.rpm 8032585c43a5802b6b8687ef3157533ca1d3b428725ae8bc61d831cf92d1f8a4
ppc64le dotnet-sdk-dbg-9.0-9.0.117-1.el9_8.ppc64le.rpm 851da94014484824b41b3e436151d0158e088ec1ccf5c3a419ea9fbab6dcf29f
ppc64le aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_8.ppc64le.rpm 930167c81dce03c5bb8947269d10e5d09ffaa93025c817224b36122c923e2cfd
ppc64le aspnetcore-runtime-9.0-9.0.16-1.el9_8.ppc64le.rpm cdaf706ea37a9e81f676173f7650fd6b59caeae91ae88d4338fbc9f0fa17ce25
s390x dotnet-runtime-dbg-9.0-9.0.16-1.el9_8.s390x.rpm 06f0324aeb3cbe0b1b18500bb16b4dc5efc2da33fce059be4a9cf8f0b9268da4
s390x aspnetcore-runtime-9.0-9.0.16-1.el9_8.s390x.rpm 1d538bcfe28e5ccd21d85a902115dcd78396aa6db8bac3f37751d9de50f001a6
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el9_8.s390x.rpm 354790bd2ad65a40c54a2ad8cdac38e4032296a5854e8e1a7c5c01450d977a8c
s390x dotnet-templates-9.0-9.0.117-1.el9_8.s390x.rpm 35efacd237c90c7f99f0bd486dda5200ba35403043844b688ce9a66edaa369e3
s390x dotnet-hostfxr-9.0-9.0.16-1.el9_8.s390x.rpm 423883cd3401aa4abd96e63b157c3d5c5a77a5cac286e2b95efc11d90595ec0d
s390x aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_8.s390x.rpm 68853da2ebd4152fe19856597640c525b6cce1e2da894219d8cfc27da714c491
s390x dotnet-runtime-9.0-9.0.16-1.el9_8.s390x.rpm 8c70134eefc25c4f911c82dbd2598b4e92dc65e37dd92cdce59b8e6d929de453
s390x dotnet-sdk-9.0-9.0.117-1.el9_8.s390x.rpm b245cc40157571b0251e431c7f23fd9e92366e6deb70e4fa253d32e7ebce1e17
s390x dotnet-targeting-pack-9.0-9.0.16-1.el9_8.s390x.rpm b72b72a4d8089d83364694a4ab6dde7dac4612c0696bf7f7d0fbc2a35ba6e47b
s390x aspnetcore-targeting-pack-9.0-9.0.16-1.el9_8.s390x.rpm cb221570eec88882bcc11c04cabe0635192cefd2fdd6b20ab2a4e8e4a5e4161b
s390x netstandard-targeting-pack-2.1-9.0.117-1.el9_8.s390x.rpm cf1bb6c1390129619382107ff6d9fe9911953550a4b70453420e8854221fd03b
s390x dotnet-sdk-dbg-9.0-9.0.117-1.el9_8.s390x.rpm d3f143ee3e4ef40a877ea93ce60310921dc8aa296ba8ccf902b9862684a91882
s390x dotnet-apphost-pack-9.0-9.0.16-1.el9_8.s390x.rpm fb7cf824d3ae971f33fde4335b8a746149bd6f890e26236c4b92fb42cc08c3c7
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el9_8.x86_64.rpm 0216c99a73c72823d8da2ad8143ff42fe9240fec041ecdacef595bc7603b1997
x86_64 aspnetcore-targeting-pack-9.0-9.0.16-1.el9_8.x86_64.rpm 0a64056a846f36372780db2efb8629cfd93995ff041fb5d675c3b5f85dd0a097
x86_64 aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_8.x86_64.rpm 1ecb05ba57386920222314a1e6a45e88545f2fcabe229e9502ca638b47616cfb
x86_64 aspnetcore-runtime-9.0-9.0.16-1.el9_8.x86_64.rpm 22d722f13d526ac19b815355b776fd25c82c1b00ca58cf5f1f0e4d4ff2455bd9
x86_64 dotnet-sdk-9.0-9.0.117-1.el9_8.x86_64.rpm 281c0324d3e1c3d22034914986c1fd00be88e70cb528405213aaf7d017263129
x86_64 dotnet-runtime-dbg-9.0-9.0.16-1.el9_8.x86_64.rpm 3319489abee8e16acc188ec35cdaa474b739fd2fabd3f957b2675d4ac82500b3
x86_64 dotnet-runtime-9.0-9.0.16-1.el9_8.x86_64.rpm 3c297486b55fd7babfb1ecc7bf3557ea74a9ec7f0faf0270d6891ec4ecaec9d9
x86_64 dotnet-templates-9.0-9.0.117-1.el9_8.x86_64.rpm 4c7a02a135c7b212ed56c2e48baea24c15318d3da3e22d3923ba341ade1f82b1
x86_64 dotnet-targeting-pack-9.0-9.0.16-1.el9_8.x86_64.rpm 8019ab6d224e9a8a69dad5d6dcb68e033fba024d86e7159db069b1f43912789a
x86_64 dotnet-sdk-dbg-9.0-9.0.117-1.el9_8.x86_64.rpm 8b95e8fd176c2dfad41ae381d3acfe5ebd011ea1de291acdab994d2335eb151e
x86_64 netstandard-targeting-pack-2.1-9.0.117-1.el9_8.x86_64.rpm 9af419f30339425580eef094a6a616fd7f12eb2418578142aac60b341e44a357
x86_64 dotnet-hostfxr-9.0-9.0.16-1.el9_8.x86_64.rpm b2f1eba86096ad09a1b06a89a0a2bd54f615872cc8a02e430bac1180a3a982d1
x86_64 dotnet-sdk-aot-9.0-9.0.117-1.el9_8.x86_64.rpm b5164d021199e6a70f7bff40e17490e8ba3616a0aeb40b6347fec76bb2ff7854
x86_64 dotnet-apphost-pack-9.0-9.0.16-1.el9_8.x86_64.rpm f934df09640084ead2ee21681772a59d62107598498087fd143f6257b3b81d98
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.