[ALSA-2026:4456] Important: .NET 9.0 security update
Type:
security
Severity:
important
Release date:
2026-03-16
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-apphost-pack-9.0-9.0.14-1.el9_7.aarch64.rpm 02eb0213ed2716c92ecdb5d8170aa90596937a051e1772dd9919d7b8f8c31582
aarch64 dotnet-targeting-pack-9.0-9.0.14-1.el9_7.aarch64.rpm 0b45336dc4049bcc9dae39d02c80d591f67cf11073d0448940cea6bf56405272
aarch64 dotnet-hostfxr-9.0-9.0.14-1.el9_7.aarch64.rpm 10623d3c942508853375a02b04628296c6e7d8e99fb8a8e680ab1188d32719d8
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el9_7.aarch64.rpm 1d2fe78703951ad86420b8184efd13b3e716a097a6197bcdb68558346586d006
aarch64 netstandard-targeting-pack-2.1-9.0.115-1.el9_7.aarch64.rpm 5a9ade967163fc4943b7cf7339143d36763aca863e173a4288de01be7bd6a0a7
aarch64 dotnet-templates-9.0-9.0.115-1.el9_7.aarch64.rpm 6f9ba25623725c34abfab9637dd8f7a47e163d678c4e93d4859a501ecc5a0570
aarch64 dotnet-sdk-aot-9.0-9.0.115-1.el9_7.aarch64.rpm 80d60988fc7fbbccea8d431c8a0366e0c770e6621ea4f06bbf59fa6fba967bae
aarch64 dotnet-sdk-9.0-9.0.115-1.el9_7.aarch64.rpm 88158105b0ff9a52709b3a400a48066dcd8401ee58c19fcb48e6e12214f61fda
aarch64 dotnet-runtime-dbg-9.0-9.0.14-1.el9_7.aarch64.rpm 930b0e7adebe3ed973007ed89d71c1caef50ef679172dfb1813ac4c3402d90ed
aarch64 aspnetcore-runtime-9.0-9.0.14-1.el9_7.aarch64.rpm abb638074d081d8fc9832df78f172c8238520cd61c3d4f3d136522bad7264dcb
aarch64 dotnet-sdk-dbg-9.0-9.0.115-1.el9_7.aarch64.rpm d7c9233d95735937b9a4db951102d0abb860587ecb89ad6e017a1ef281522536
aarch64 dotnet-runtime-9.0-9.0.14-1.el9_7.aarch64.rpm edb879223adff71403b979ba6ce2cf0a6895df2938a915cc45f8d872d6637f47
aarch64 aspnetcore-targeting-pack-9.0-9.0.14-1.el9_7.aarch64.rpm f182da5e517df1398f86ffd82c768b712d3d94a3d4c60426af80ee276880dcee
aarch64 aspnetcore-runtime-dbg-9.0-9.0.14-1.el9_7.aarch64.rpm f582f79c646ec27187875a221937d872e967394c489acbb4b30dc31eaa7fb218
ppc64le dotnet-runtime-9.0-9.0.14-1.el9_7.ppc64le.rpm 2009c6fd69bb3020310bb956548532f1af5501a9a985dfc8cc80c11f8860829d
ppc64le dotnet-apphost-pack-9.0-9.0.14-1.el9_7.ppc64le.rpm 31f22048d5b7c8c98f2e15018aad195aa626a8c9e14d03766a701315f5582117
ppc64le dotnet-sdk-9.0-9.0.115-1.el9_7.ppc64le.rpm 33b7e4919e8b9a5565e54ef5a5131213ab12ba56278751d5fcff8c0909512a87
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el9_7.ppc64le.rpm 380f895466115fed371636a7ae0be950863f48052336dbb23c45e130b09a9cc6
ppc64le aspnetcore-runtime-9.0-9.0.14-1.el9_7.ppc64le.rpm 3fbe9c769303210a713b7fbf9d1bac8ff801927770045629aad1975374be5607
ppc64le aspnetcore-targeting-pack-9.0-9.0.14-1.el9_7.ppc64le.rpm 47c5bae248401f00e9e293574b8e7725a51dcc93cf7ff0877365150c6a64b837
ppc64le netstandard-targeting-pack-2.1-9.0.115-1.el9_7.ppc64le.rpm 506623b83e542edccdedb927c244c7613ae8a4a84264ef269e786dd68559a36b
ppc64le dotnet-hostfxr-9.0-9.0.14-1.el9_7.ppc64le.rpm 52f5a0bdb3fde0a1e1685bd4d74b3fc7d6a35b82d2de45cc8dd0272069c687b0
ppc64le dotnet-sdk-dbg-9.0-9.0.115-1.el9_7.ppc64le.rpm 793b03c3e41c34b644943c7bff887358c2b85891fd03c24669da5113d3d89547
ppc64le aspnetcore-runtime-dbg-9.0-9.0.14-1.el9_7.ppc64le.rpm 7f9e13aa6f7008c56eeaf44eec6c7c85b1da9488c91e163188f32c3231da33f1
ppc64le dotnet-templates-9.0-9.0.115-1.el9_7.ppc64le.rpm a9c96892590b5e7e6c2eda22385ce407eafa1b0a2e21f1c71111bc712aaf3d4c
ppc64le dotnet-runtime-dbg-9.0-9.0.14-1.el9_7.ppc64le.rpm d8eedf696e6d04df4e4240f515646100b858ead069c0ce4b8716b7b472d99230
ppc64le dotnet-targeting-pack-9.0-9.0.14-1.el9_7.ppc64le.rpm e5d2227409c977c5e8eb7f4927d4635210ad110bcfd0972305cfad48d0626d91
s390x aspnetcore-targeting-pack-9.0-9.0.14-1.el9_7.s390x.rpm 11ad6fad7a5e94f3ece05b0db0341b98ddc5601404865e560a1e9363c072ce3c
s390x dotnet-sdk-dbg-9.0-9.0.115-1.el9_7.s390x.rpm 13103d40ae56ea81f7e1b6d16c125c067dfb2f116333e40eedc126796a080ad7
s390x dotnet-hostfxr-9.0-9.0.14-1.el9_7.s390x.rpm 20240119eaf4597065d343df2c57a0c16ec53c32ae145aa9fa7c948bd6884a3c
s390x dotnet-targeting-pack-9.0-9.0.14-1.el9_7.s390x.rpm 24bff03a4308c20842612b2325f38f2e50fe111b45f8ba861609086bc276b8f7
s390x aspnetcore-runtime-dbg-9.0-9.0.14-1.el9_7.s390x.rpm 2c728b2a6f266eb6cb358520dd6d2cd546a88761945a5a15d40f1b4a7ffcb6f7
s390x netstandard-targeting-pack-2.1-9.0.115-1.el9_7.s390x.rpm 973caa432ca331864eeb6681e4e5913cc064442f4b209728f76f2bd493f4a7ff
s390x dotnet-runtime-dbg-9.0-9.0.14-1.el9_7.s390x.rpm 97d2b3ccf2d4ad434b2918e19036c41ca330ef4aea9e74d237f573c42259d8f3
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el9_7.s390x.rpm 9d87a3822e40da8d0b6fd8f9b9c33415d1ec276fb8a8ed9f8b93e03fa4246a3c
s390x dotnet-templates-9.0-9.0.115-1.el9_7.s390x.rpm a286c2b254908f2b270e4157a25610246b3c1b42a6ca0739b75efe932ca8aa42
s390x dotnet-sdk-9.0-9.0.115-1.el9_7.s390x.rpm b4c1e79b82f0497f423ba9b8b66107465aeb80148c4f34bb759d4da18ea7d597
s390x aspnetcore-runtime-9.0-9.0.14-1.el9_7.s390x.rpm b5cb17184b9c18698f2a81de5617c4309087387f9c8c57befeeeabbd446b4ffb
s390x dotnet-runtime-9.0-9.0.14-1.el9_7.s390x.rpm dbd48f36cc5ffd9a1df96b422bf17e01cfc035569fd86d5671a06a39632cf7ea
s390x dotnet-apphost-pack-9.0-9.0.14-1.el9_7.s390x.rpm f08df93ea1db84049814fec98f5e60094cbe6c32999176a7926b68b5bb1c5941
x86_64 aspnetcore-runtime-dbg-9.0-9.0.14-1.el9_7.x86_64.rpm 0faa9794f82e45426a8faf2af5e448840e064b60b418387aa3eec69fe3a8773b
x86_64 dotnet-apphost-pack-9.0-9.0.14-1.el9_7.x86_64.rpm 34aec30a56690c91df429214b9d3a4b64085ceb99f6c997c631612b4f5ad2794
x86_64 dotnet-sdk-aot-9.0-9.0.115-1.el9_7.x86_64.rpm 657df7e4ddad9618c18dd4ce42b48f99c92823501adf99e9546da528202d8f6d
x86_64 dotnet-sdk-dbg-9.0-9.0.115-1.el9_7.x86_64.rpm 788166eedcccf5a148e51d3633af1aa45e7229e32379fb3005b938671e22dee0
x86_64 aspnetcore-targeting-pack-9.0-9.0.14-1.el9_7.x86_64.rpm 8d3fbde273210d7d9fd122b7899152f4fb90ebdec3b84d7ff9e381c7810ebfb3
x86_64 dotnet-runtime-9.0-9.0.14-1.el9_7.x86_64.rpm 8eb2f48b0c41b3f7786772555067c486db1f359537550d636b6b977d73e062b3
x86_64 dotnet-templates-9.0-9.0.115-1.el9_7.x86_64.rpm a435e3a2dbedf7a97e2cde2323b0c502b716457127e070b23d1b0b1f585a03d4
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el9_7.x86_64.rpm b39daa1924db0d784470e8c72e2a5f398a66b9365baf9780b022a2d99d1bd33f
x86_64 aspnetcore-runtime-9.0-9.0.14-1.el9_7.x86_64.rpm bd1fa04ee10a2e7613d4d8e906cb9a7fb0f382fcbc66e23d94cc1f0c196f03f5
x86_64 dotnet-targeting-pack-9.0-9.0.14-1.el9_7.x86_64.rpm bd786c48b4924e97ee6e7fafec4ed8795e83fc029cf505b284193d06cabd47ad
x86_64 netstandard-targeting-pack-2.1-9.0.115-1.el9_7.x86_64.rpm cccd8462f3d26ae1e1a7c0052665317459201a13eaf57948aa172a5033592564
x86_64 dotnet-runtime-dbg-9.0-9.0.14-1.el9_7.x86_64.rpm cff9c78cf94b5543ab7fe4593c9353bcc980249d8d9019b7cf27ed3aea5352d4
x86_64 dotnet-sdk-9.0-9.0.115-1.el9_7.x86_64.rpm e01c8fbf1dd7090f790cf8b20456eae6adc86634b46eb1089d7c29e50c6f7b27
x86_64 dotnet-hostfxr-9.0-9.0.14-1.el9_7.x86_64.rpm f4297ba938b0c6ad81d72f0fac4ceaa0c10a137ea1a9f047f51bc73cfe49f33e
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.