Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Linux .NET 9.0 update needed to prevent unauthorized access

published 3 months ago

Summary

Red Hat’s latest update for the .NET 9.0 runtime fixes several security weaknesses that could let attackers run code or view data they shouldn’t. Organizations using Red Hat Enterprise Linux with .NET 9.0 should install the provided security patches as soon as possible to keep their systems safe.

What to do

Update redhat aspnetcore-runtime-9.0 to version 0:9.0.18-1.el9_8.
Update redhat aspnetcore-runtime-dbg-9.0 to version 0:9.0.18-1.el9_8.
Update redhat aspnetcore-targeting-pack-9.0 to version 0:9.0.18-1.el9_8.
Update redhat dotnet-apphost-pack-9.0 to version 0:9.0.18-1.el9_8.
Update redhat dotnet-apphost-pack-9.0-debuginfo to version 0:9.0.18-1.el9_8.
Update redhat dotnet-hostfxr-9.0 to version 0:9.0.18-1.el9_8.
Update redhat dotnet-hostfxr-9.0-debuginfo to version 0:9.0.18-1.el9_8.
Update redhat dotnet-runtime-9.0 to version 0:9.0.18-1.el9_8.
Update redhat dotnet-runtime-9.0-debuginfo to version 0:9.0.18-1.el9_8.
Update redhat dotnet-runtime-dbg-9.0 to version 0:9.0.18-1.el9_8.
Update redhat dotnet-sdk-9.0 to version 0:9.0.119-1.el9_8.
Update redhat dotnet-sdk-9.0-debuginfo to version 0:9.0.119-1.el9_8.
Update redhat dotnet-sdk-aot-9.0 to version 0:9.0.119-1.el9_8.
Update redhat dotnet-sdk-aot-9.0-debuginfo to version 0:9.0.119-1.el9_8.
Update redhat dotnet-sdk-dbg-9.0 to version 0:9.0.119-1.el9_8.
Update redhat dotnet-targeting-pack-9.0 to version 0:9.0.18-1.el9_8.
Update redhat dotnet-templates-9.0 to version 0:9.0.119-1.el9_8.
Update redhat dotnet9.0 to version 0:9.0.119-1.el9_8.
Update redhat dotnet9.0-debuginfo to version 0:9.0.119-1.el9_8.
Update redhat dotnet9.0-debugsource to version 0:9.0.119-1.el9_8.
Update redhat netstandard-targeting-pack-2.1 to version 0:9.0.119-1.el9_8.
Update redhat dotnet-sdk-9.0-source-built-artifacts to version 0:9.0.119-1.el9_8.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	aspnetcore-runtime-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	aspnetcore-runtime-dbg-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	aspnetcore-targeting-pack-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-apphost-pack-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-apphost-pack-9.0-debuginfo	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-hostfxr-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-hostfxr-9.0-debuginfo	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-runtime-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-runtime-9.0-debuginfo	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-runtime-dbg-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-sdk-9.0	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-sdk-9.0-debuginfo	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-sdk-aot-9.0	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-sdk-aot-9.0-debuginfo	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-sdk-dbg-9.0	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-targeting-pack-9.0	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet-templates-9.0	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet9.0	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet9.0-debuginfo	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	dotnet9.0-debugsource	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	netstandard-targeting-pack-2.1	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet-apphost-pack-9.0-debuginfo	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet-hostfxr-9.0-debuginfo	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet-runtime-9.0-debuginfo	< 0:9.0.18-1.el9_8 Fix: upgrade to 0:9.0.18-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet-sdk-9.0-debuginfo	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet-sdk-9.0-source-built-artifacts	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet-sdk-aot-9.0-debuginfo	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet9.0-debuginfo	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8
Red Hat:enterprise_linux:9::crb	redhat	dotnet9.0-debugsource	< 0:9.0.119-1.el9_8 Fix: upgrade to 0:9.0.119-1.el9_8

Original advisory text

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:41896 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2499217 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500109 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500189 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500492 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500502 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500509 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500515 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500556 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500562 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500563 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500565 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500577 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500580 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500581 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500587 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500589 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2500593 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41896.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-47300 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47300 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47300 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47302 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47302 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47302 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47303 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47303 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47303 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-47304 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-47304 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-47304 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50524 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50524 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50524 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50525 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50525 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50525 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50526 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50526 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50526 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50527 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50527 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50527 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50528 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50528 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50528 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50646 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50646 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50646 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50648 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50648 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50648 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50649 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50649 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50649 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50650 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50650 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50650 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50651 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50651 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50651 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-50659 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50659 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50659 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-56170 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-56170 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-56170 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-57108 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-57108 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-57108 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published23 Jul 2026

Updated25 Aug 2026

First seen25 Aug 2026

Sources

RHSA-2026:41896 · OSV

Track software like this

Free during beta