[ALSA-2026:25221] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-06-12
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-dbg-9.0-9.0.17-1.el9_8.aarch64.rpm 058250aa122b2fdeffcdbb5c05ddd7f0d3438bfdf53cdd28cb08bcb41275d7e9
aarch64 dotnet-sdk-dbg-9.0-9.0.118-1.el9_8.aarch64.rpm 1c4db9905ce0eb641d0b3193cfb3797865f748dcba343e42c6b164b54ad62b44
aarch64 dotnet-sdk-9.0-9.0.118-1.el9_8.aarch64.rpm 2556fdf41793e4926f62f8e7516316c7984b263f020b72c51f16cc8b57df39c7
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el9_8.aarch64.rpm 2a064c20296f6042fdf0476bc628fa9cb6a937d12834ad74c0ffb0fef4598b75
aarch64 aspnetcore-targeting-pack-9.0-9.0.17-1.el9_8.aarch64.rpm 3fd85e6d558b8a792a0cd395e4bb590ce2fd452126d7c0540d3b4162b7da482a
aarch64 dotnet-apphost-pack-9.0-9.0.17-1.el9_8.aarch64.rpm 4e69ee4c78618534707823d754a784f2056ab0c3adfbe91e7ab405fea6f17502
aarch64 aspnetcore-runtime-9.0-9.0.17-1.el9_8.aarch64.rpm 5ee9ecde919ca92e11351888b8048840af5e2320c61183ffe02403d4cb38083b
aarch64 aspnetcore-runtime-dbg-9.0-9.0.17-1.el9_8.aarch64.rpm 79584a997e3920f0d32469feb988292da17672c8bba1f411df0ffd065239af70
aarch64 dotnet-hostfxr-9.0-9.0.17-1.el9_8.aarch64.rpm 809e6f2a2a41dce287c4b95c3af185a2d48c7ddc6828ea98a60a4d1e45472ded
aarch64 dotnet-templates-9.0-9.0.118-1.el9_8.aarch64.rpm 8e5b8fc9dced6bc88d158cbd2b81fcbe23387947a6f31df3df1284b4401576aa
aarch64 dotnet-runtime-9.0-9.0.17-1.el9_8.aarch64.rpm b78d13b916c4fcda0beb7ebfa35e4d2dfcfa815d63fc033b7ccc29bdf119987c
aarch64 dotnet-sdk-aot-9.0-9.0.118-1.el9_8.aarch64.rpm e2c00a48d42c1001b2d32b033c3e1816b9f4bba47cf22c7650874ad012d3dba5
aarch64 dotnet-targeting-pack-9.0-9.0.17-1.el9_8.aarch64.rpm eb0a68292d528c61d00b6dd5ba3896554f0e9bd9da2ebe4a06185b622faf311f
aarch64 netstandard-targeting-pack-2.1-9.0.118-1.el9_8.aarch64.rpm f7330a795a2b9836093899f90733f69a792bc4dab5916eb24c94177e5783bda8
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el9_8.ppc64le.rpm 102e752f132fc2a417d8034b444db0837dbf2f4449fceb8acba3fc297ba3d761
ppc64le dotnet-runtime-dbg-9.0-9.0.17-1.el9_8.ppc64le.rpm 1d0b46eaeeeba9d32633bdf5f64dc10805b1af49d243978ff79c0335ab4be799
ppc64le dotnet-apphost-pack-9.0-9.0.17-1.el9_8.ppc64le.rpm 1f8e159b025362174c020d37714088047d80c51185dc9d6f8d937f98217b4959
ppc64le dotnet-sdk-9.0-9.0.118-1.el9_8.ppc64le.rpm 591a6a640e04bf5e7c771fd10c2643bfcdc5d500edf3cd96ed1f7cd0b9c37e4d
ppc64le aspnetcore-runtime-dbg-9.0-9.0.17-1.el9_8.ppc64le.rpm 7277781f6480b811323de15a16a24c41f62c6da44ab1fabb4dff172ca1cabe7e
ppc64le netstandard-targeting-pack-2.1-9.0.118-1.el9_8.ppc64le.rpm 8ac216b474be6798c43b00c23bf3e2ce93696d374791e2b434ec2a933c3b6adf
ppc64le dotnet-targeting-pack-9.0-9.0.17-1.el9_8.ppc64le.rpm 8b4494fffc75e8e67dabd2eb6da894d9228a46cc6a0f8b6ab502b70139dfd8c3
ppc64le dotnet-templates-9.0-9.0.118-1.el9_8.ppc64le.rpm a2d1854eded6be58eb72bf667b9aae6afde9217925221d63e8feb71e5d999cca
ppc64le dotnet-runtime-9.0-9.0.17-1.el9_8.ppc64le.rpm b66b748ef9663b95a0790bf6472e22725ecb88ff68834bdaf639d70eb1f6bd0a
ppc64le aspnetcore-targeting-pack-9.0-9.0.17-1.el9_8.ppc64le.rpm c0d1a4449b817f6c25d6e1903bcd5b3df5e28ff06b7d580ac5c2678c097ce022
ppc64le aspnetcore-runtime-9.0-9.0.17-1.el9_8.ppc64le.rpm c10bde9d238f884510d8b3438c0697666e257194cf884beedecca7140cb4b171
ppc64le dotnet-sdk-dbg-9.0-9.0.118-1.el9_8.ppc64le.rpm d52899f5bca68256049235ab4edc7686ff5fa1803393110bed0755b011e96035
ppc64le dotnet-hostfxr-9.0-9.0.17-1.el9_8.ppc64le.rpm ffee09aed2077f863bb2180faf154d3091e986c4583bdeec6df2311937dcc0bb
s390x dotnet-hostfxr-9.0-9.0.17-1.el9_8.s390x.rpm 4c47229153d5d4bf7b96d99caf167cd5b2e7092c67f1ce4795ac7d4dfd0e4caf
s390x aspnetcore-runtime-dbg-9.0-9.0.17-1.el9_8.s390x.rpm 53430d9614b66727972a26d5b07ab5f4c528f5fbfb8bf15e6122a165ce863d06
s390x aspnetcore-targeting-pack-9.0-9.0.17-1.el9_8.s390x.rpm 59b9ac79c689958de80f2bf0c768066e8b1bbe36a7c9328dcc133b159bb71f6f
s390x aspnetcore-runtime-9.0-9.0.17-1.el9_8.s390x.rpm 6acccd0a4a0b005e6b450b193ffe0b69b03dd7b8b97711fe7db03525f59dbe72
s390x dotnet-templates-9.0-9.0.118-1.el9_8.s390x.rpm 7eb435a784b7dd89dfe41122f546f8155b42f5518fae5bfdf27ac37249d4c3dc
s390x dotnet-targeting-pack-9.0-9.0.17-1.el9_8.s390x.rpm 82c7dbabe617245471bd383786a71711d30d0185368110bd14cd7d0873758767
s390x dotnet-sdk-dbg-9.0-9.0.118-1.el9_8.s390x.rpm 919f2c202d3e1969f9f12b0a26181ba2e646dc670d7fc17058e908a55fd23fd5
s390x dotnet-runtime-dbg-9.0-9.0.17-1.el9_8.s390x.rpm b275e93a85dbc1ae1d0afb028add2ba8857526e32ce015b53179184d8a790f1f
s390x dotnet-runtime-9.0-9.0.17-1.el9_8.s390x.rpm b35d2e5ef0a2702417af25aa946ac108707f52ee7ba3c4e724e401f48fdae526
s390x dotnet-apphost-pack-9.0-9.0.17-1.el9_8.s390x.rpm b84ebf56322675ccaf910c4646b77622082138907073f943e955abade3f7a720
s390x netstandard-targeting-pack-2.1-9.0.118-1.el9_8.s390x.rpm cbb433cad5398073f9e2126026341b02aad0a0d706cd8bbb4859db8c0fd3857c
s390x dotnet-sdk-9.0-9.0.118-1.el9_8.s390x.rpm da1571e333873a1c1493fd53f7f29bba0c9a0a70ee59abc550239bc1c7b123d5
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el9_8.s390x.rpm ddb51d2391e4cc832671464bb8cb571cad6e746c3ca4b8ecafa50578d1f9dae3
x86_64 dotnet-templates-9.0-9.0.118-1.el9_8.x86_64.rpm 29a7edb4151d17383b77e03efae46184d89d83603030198f27bea1542cb8c327
x86_64 dotnet-sdk-9.0-9.0.118-1.el9_8.x86_64.rpm 4671d50a8db34cfbadb8ecb6aa816caadd952c6bf3bce6010f3cb823f384ee0b
x86_64 dotnet-apphost-pack-9.0-9.0.17-1.el9_8.x86_64.rpm 5d8293810f4176dac3aa7ef4f0d6756fb8f6f5f724d3cd50093c831d85eb7b90
x86_64 netstandard-targeting-pack-2.1-9.0.118-1.el9_8.x86_64.rpm 6d1a0e59326899fd33dd1e6f8b765b3455cf62664c42dbce6b4a8eec14955833
x86_64 dotnet-runtime-dbg-9.0-9.0.17-1.el9_8.x86_64.rpm 757efca68d7627f6d087e75ae770040b7af9c0bcdb658573c08b351c256f55c7
x86_64 aspnetcore-runtime-dbg-9.0-9.0.17-1.el9_8.x86_64.rpm 7d7fcff9fb5347c29db08451f40ac29a30a5a18c71b6a2f4ac7debbe2cf1f8b1
x86_64 aspnetcore-runtime-9.0-9.0.17-1.el9_8.x86_64.rpm 7e8bee6f4fbf3b20b33962c78e81c2abc957f0a73053a4e7057bfb473894f855
x86_64 dotnet-sdk-dbg-9.0-9.0.118-1.el9_8.x86_64.rpm a303e02e346ea668e124f21c408fcafe7f64690055bb73b68c211503e67048c1
x86_64 aspnetcore-targeting-pack-9.0-9.0.17-1.el9_8.x86_64.rpm a5e0938c1740bcec34eb6694cf51f5258001e9bf7cd2778c7c162e27a8c46edb
x86_64 dotnet-runtime-9.0-9.0.17-1.el9_8.x86_64.rpm ac2e387847a81f9289dd2042b8cf08351dfe174ee5ecf9fe4915d64e7646655b
x86_64 dotnet-targeting-pack-9.0-9.0.17-1.el9_8.x86_64.rpm c5f993dd40f4a98cba6b77547ee5829176b235bad447c3171b0665e9997676cc
x86_64 dotnet-sdk-aot-9.0-9.0.118-1.el9_8.x86_64.rpm e0bfb33d7b354a06eb8ae58b57a34c1a60b9a84bec2e09f8dbdc0e0c63bef954
x86_64 dotnet-hostfxr-9.0-9.0.17-1.el9_8.x86_64.rpm e551e5c0c46fa27a8c8878fbd3ddc0a391e52bb6cc76cfcf872028a9d552486a
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el9_8.x86_64.rpm edba7d694cbd1e49674c1bec9282f69e4c747c9718e4d23b4081f74cccebce9c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.