[ALSA-2026:55856] Important: .NET 9.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-08-18
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 9.0.120 Runtime version: 9.0.19 Security Fix(es): * .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) * .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) * .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): * Update .NET 9.0 to SDK 9.0.120 and Runtime 9.0.19 [almalinux-9.8.z] (JIRA:AlmaLinux-235476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-runtime-dbg-9.0-9.0.19-1.el9_8.aarch64.rpm 0d1a1d1b1af95dd4e8e7ccc48c6a40e14f3121764a4a588df7aa2ee5b17c027c
aarch64 dotnet-apphost-pack-9.0-9.0.19-1.el9_8.aarch64.rpm 21d7ee025ac3e0bae83b260baca260a246ecb6491052898a56fd9dd99c3da6b4
aarch64 dotnet-templates-9.0-9.0.120-1.el9_8.aarch64.rpm 29ac2d80a9a1946e39e5ec59e8921d83031f1097c11509fa3262ddb1c8a6eb64
aarch64 dotnet-sdk-aot-9.0-9.0.120-1.el9_8.aarch64.rpm 55ad20347f265273888df05a4a7fb30ee8993322193c9324cd32085876105881
aarch64 aspnetcore-runtime-dbg-9.0-9.0.19-1.el9_8.aarch64.rpm 5cf4f8f9176f6d16c5981aa824cdf72b61507db97662174697b15f3e0e934e56
aarch64 dotnet-targeting-pack-9.0-9.0.19-1.el9_8.aarch64.rpm 61a1080c2972570dd7504ba3b19b9c48491e7c3d6a9a5b68e3ed27f7c6791f3b
aarch64 dotnet-runtime-9.0-9.0.19-1.el9_8.aarch64.rpm 640526fd360848a99aa0876b62f26a619e9435e5ed2bba7b5b3a0d9f4ebfd0d9
aarch64 aspnetcore-runtime-9.0-9.0.19-1.el9_8.aarch64.rpm 787cb198fdd257685487a1efa83582bf89fc0a46871130c0da50a69912cbd229
aarch64 dotnet-hostfxr-9.0-9.0.19-1.el9_8.aarch64.rpm 84976bf424c9f43b311fc0538b3959223d965daee243b2cd845fbee179b80979
aarch64 dotnet-sdk-dbg-9.0-9.0.120-1.el9_8.aarch64.rpm 9315c231239b2f94ff6eb1c21689a3c1df9650e9a5f990fe0fef4e1d028c6b46
aarch64 dotnet-sdk-9.0-9.0.120-1.el9_8.aarch64.rpm c6accdb08801af9814cb8e3c3fe5a176e8cb994784baf58c7df9aa748be53176
aarch64 aspnetcore-targeting-pack-9.0-9.0.19-1.el9_8.aarch64.rpm c9add97bfb06adf811645f832135714852d822fcd1660452e3290a74bd5d88dd
aarch64 netstandard-targeting-pack-2.1-9.0.120-1.el9_8.aarch64.rpm e20ac0ff3d830f1f42ca8c70021f8fd02bd55da653dd0f8019bb1c418b481920
aarch64 dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el9_8.aarch64.rpm e2343749a471080049bd28ddcc2b66461045fbaef0252d92bca3d45071dfccd9
ppc64le dotnet-runtime-dbg-9.0-9.0.19-1.el9_8.ppc64le.rpm 07bf65d8a9c07007d7b84dcb66eb3e4f6ab96b64f82b0581e88e7cf836e888cf
ppc64le dotnet-sdk-dbg-9.0-9.0.120-1.el9_8.ppc64le.rpm 0a63319814b3c5b27e3828ca0ff885503aa196b75998119fe816236f168448a1
ppc64le dotnet-sdk-9.0-9.0.120-1.el9_8.ppc64le.rpm 1d658fbd1924502ee9904f56ef2beba0f7516e765ebc8c136d514ea70245b522
ppc64le dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el9_8.ppc64le.rpm 20fd344374413b8566a6e3be6ad9df1ca4b64449cbf0e249662f39e26c382671
ppc64le dotnet-hostfxr-9.0-9.0.19-1.el9_8.ppc64le.rpm 3bfb60e0a90daffd7f8e9263c6945438c8e4e499e21bc8890abd9d58264a19fc
ppc64le netstandard-targeting-pack-2.1-9.0.120-1.el9_8.ppc64le.rpm 44c6388250d576d2e4060fc466ad48b236943c617c6385b071a2423208df8b23
ppc64le dotnet-apphost-pack-9.0-9.0.19-1.el9_8.ppc64le.rpm 68e395a433f7f0e1266dd8ad55b7ab472160f5d657a4465250b57923dafcb4b4
ppc64le dotnet-runtime-9.0-9.0.19-1.el9_8.ppc64le.rpm 7a28114960edbd24c30cd13846bb6ee2d3188376a741ddb02bf264d7321e6326
ppc64le dotnet-targeting-pack-9.0-9.0.19-1.el9_8.ppc64le.rpm 8e8fcc05f905f5fb579aed2459dcaac12727cf8006038987d06a6b7b9cebcd05
ppc64le aspnetcore-targeting-pack-9.0-9.0.19-1.el9_8.ppc64le.rpm 9395f62bcc861629b8c5d2ad870986ef1aa587958cb1d975c3f1dd191521646e
ppc64le aspnetcore-runtime-9.0-9.0.19-1.el9_8.ppc64le.rpm b23971d0391fc4c5fd765bce78d175b150605e9452656809f83d8c3f57da784f
ppc64le aspnetcore-runtime-dbg-9.0-9.0.19-1.el9_8.ppc64le.rpm e96c7e2f20ae6c460bbe19faed20633f317280b14962095f3f7614fbc60cb5d4
ppc64le dotnet-templates-9.0-9.0.120-1.el9_8.ppc64le.rpm ec37da7150010b08b176aa135a91ea7287e7bd65f240ae687832e8451f222374
s390x dotnet-apphost-pack-9.0-9.0.19-1.el9_8.s390x.rpm 101193076f915d459d201c361e71f012c85d0f39dcd33bce8685366181e39562
s390x dotnet-runtime-9.0-9.0.19-1.el9_8.s390x.rpm 163c33851ce5831635cb5097ac4067271b7ea65389109639c1e1994063c1f93f
s390x aspnetcore-runtime-dbg-9.0-9.0.19-1.el9_8.s390x.rpm 1e50c3031e0ee7f4b481b214b7c52102244d8f6861549d423bd9e8fd4f28a789
s390x dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el9_8.s390x.rpm 2bbd824f88f502cf309e8c7880f7953682bc98a38b83695c4bf7072a2003db1b
s390x aspnetcore-runtime-9.0-9.0.19-1.el9_8.s390x.rpm 35544a4d394cd515acab32e8bc445e0b98e1c8a57f05732afcad93254e99c312
s390x aspnetcore-targeting-pack-9.0-9.0.19-1.el9_8.s390x.rpm 4a520c0d3150a4be7ab1a5f8383871fe81f1283a1a326ab5697f87e75d144f77
s390x dotnet-hostfxr-9.0-9.0.19-1.el9_8.s390x.rpm 67fdcf3ce823265bd29b4b0e44b38ac098a026cb302d22139c8484cc2bfe81f0
s390x dotnet-sdk-dbg-9.0-9.0.120-1.el9_8.s390x.rpm 794dd4728abfcf374bee66e39fde12a1890e8a3f025b4d31919e9916a2ef9c7a
s390x dotnet-runtime-dbg-9.0-9.0.19-1.el9_8.s390x.rpm 87e32e6ac08e1fcf86cabaa48a8d0339082277d17c205394048f81a7a1a83eff
s390x dotnet-sdk-9.0-9.0.120-1.el9_8.s390x.rpm a86a4389c9eec6bd725e5797137a93b08a5ee85b41dd70547c51d471e62a6a51
s390x netstandard-targeting-pack-2.1-9.0.120-1.el9_8.s390x.rpm b5781d3bc83797e8ae129121a0924d86464a4af34931b680206dda7581460e3a
s390x dotnet-templates-9.0-9.0.120-1.el9_8.s390x.rpm c40b18ed42e86dee3d62075bb302b7f9c07a868c6312a04a88ee694ed35e03da
s390x dotnet-targeting-pack-9.0-9.0.19-1.el9_8.s390x.rpm dab0fdcc11e1e9fc6cfbdf6c67b3eb676ef899b66a8280febb54e3c568d1a5ac
x86_64 dotnet-templates-9.0-9.0.120-1.el9_8.x86_64.rpm 0ec3f368e6a23f8586812d7605df4e58406420415ad1abaad507bb5d7bb882c0
x86_64 dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.el9_8.x86_64.rpm 0f6a9ced96f85a81f6f7f059e30e512b3c0ca8402f1abaee225644e416bb170d
x86_64 dotnet-targeting-pack-9.0-9.0.19-1.el9_8.x86_64.rpm 1b461e5826dc2a90c93b7998a2bcfc59f6308d4f33e498dd3aa1afa50a76b6ab
x86_64 dotnet-hostfxr-9.0-9.0.19-1.el9_8.x86_64.rpm 33865e1bfb411762a1e38aafbd4ed59a50f580fb11a8eb53b948dda5e20d678a
x86_64 dotnet-sdk-aot-9.0-9.0.120-1.el9_8.x86_64.rpm 3dd1556b49b8f0728994abcfcf166c45f1a12eb6d2b75effcc47682e521d27cc
x86_64 aspnetcore-targeting-pack-9.0-9.0.19-1.el9_8.x86_64.rpm 44d6dde8a58ce2e14ddeec49d78b5a8774d97ed3191081b5f8e280a6347a1a76
x86_64 dotnet-runtime-9.0-9.0.19-1.el9_8.x86_64.rpm 56cb04222c80749a889fee2a40bc9b44071a1299c8891830be224ab49aed8d83
x86_64 aspnetcore-runtime-9.0-9.0.19-1.el9_8.x86_64.rpm 5da6c478dfea812059d76ece209b1f36570b882baacd9b7827761d1be781eb1e
x86_64 dotnet-sdk-dbg-9.0-9.0.120-1.el9_8.x86_64.rpm 60742fd6c9576d7db6886d1f474556afea322c39c3a407940bc3826159ec1e7e
x86_64 dotnet-apphost-pack-9.0-9.0.19-1.el9_8.x86_64.rpm 803135419fccfbc36bf9d7cdaebf55b5de6d3829d12492380c47f830aae511b7
x86_64 netstandard-targeting-pack-2.1-9.0.120-1.el9_8.x86_64.rpm 9fccd747aa3d4f2a6a13a8effe1c8a6143b7e1205e0fb418456e8ae02e2b2350
x86_64 dotnet-sdk-9.0-9.0.120-1.el9_8.x86_64.rpm aca6d83f195f51dda3c057f2d8e9c16a003f50c9cec2750c1b2c8f6498d22b68
x86_64 aspnetcore-runtime-dbg-9.0-9.0.19-1.el9_8.x86_64.rpm df9f5280fc168e8981db03d38b8887f88e117453c99008a29807adf57bf81113
x86_64 dotnet-runtime-dbg-9.0-9.0.19-1.el9_8.x86_64.rpm f3599e460d0db9ba436fe92d6555063ce6fa196bb0e56aaf7839146881d92760
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.