Red Hat Product Errata RHSA-2026:24336 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24336 - Security Advisory Overview Updated Packages Synopsis Important: .NET 9.0 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es): dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2476605 - CVE-2026-42899 dotnet: .NET: infinite loop allows an attacker to cause a denial of service CVEs CVE-2026-42899 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM dotnet9.0-9.0.117-1.el9_6.src.rpm SHA-256: a88db851d31dbb95aab80e31cfafd7ef970deeb13853da26024d505447824146 x86_64 aspnetcore-runtime-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: d382a9b9709e17f179c66ee4bd00e5c25ce49ad76d3c8d978e8b1c73d24cd245 aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 6fc962e2a04f2ac72e75848cadb6b9e9177853299b9dd15a6963ad214fc30787 aspnetcore-targeting-pack-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 80ab2e2fa2b83ca9a9f3a22203f4178f3cac7364a50c798ce223c24a6164adad dotnet-apphost-pack-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 746aa709b9f5792fab04d7778e23844d04810870c3835661065578612a46076e dotnet-apphost-pack-9.0-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: d75a8d481419dcf1955e02c06a4dc18690d1b4335c3907afef6a4436a6a1ae1c dotnet-host-9.0.16-1.el9_6.x86_64.rpm SHA-256: 07ed8bb34b27c9f0b551233c6733eb0b5e9965052e8763f0e220ae8f62aec2a0 dotnet-host-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: 50c708dfa64132e443866885873643e429ec2d65a3c1b320c0e4198242d7ef98 dotnet-hostfxr-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 7c629488c9acab40487a125e9a54544327be80fbd4a33df1a773c4b7a7ab3ac6 dotnet-hostfxr-9.0-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: b95933b3f68b28001c9e1f02f7b932021217650ddfd82c8e19f6008a619b0202 dotnet-runtime-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: b5c06f1f8c16aa8fd709601ec8da1892b3bb7733f449c40a565ccf8da2cb2694 dotnet-runtime-9.0-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: f41cbe6e126f93582957fadc9b4d496068d58c4291f7f7bfb02fe9adc85f91c4 dotnet-runtime-dbg-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: b45d9c1c46d413828a003d961f5a5fafc6790bd502fdbd7db5a61bf39258dda1 dotnet-sdk-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 9f0032d312014b39aacee660de6d366f483014b2ecf59bd4c180855387103661 dotnet-sdk-9.0-debuginfo-9.0.117-1.el9_6.x86_64.rpm SHA-256: 4c3d0aebc08f56129da83a0b4137afa071dc349117992d6b87495982dd1a1634 dotnet-sdk-aot-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 05d8d72a660796def8a139b09444a614c41d518f8a7fbe8fd178f1cf22474910 dotnet-sdk-aot-9.0-debuginfo-9.0.117-1.el9_6.x86_64.rpm SHA-256: 8c6ab1665cd3a132ef45ac0b36bab0ff4fec81da6212b2c340538484571f8fc7 dotnet-sdk-dbg-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 5927534fe15aec3b412a747697f2762fcc7c65178d27bfe7a23f7bfe70374fc2 dotnet-targeting-pack-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 6cd2a9b7d641a01ab5ae7dac6338764fc3ead554c001c479a5ea0732ab971518 dotnet-templates-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 46ede34ed8065efa83432511fa9acccd22fd000a0676008b60195de6b5435a3c dotnet9.0-debuginfo-9.0.117-1.el9_6.x86_64.rpm SHA-256: 1b2227e9fbc87c0eaaffbeba6367c722713448857ca70fc3224eb88a505e27da dotnet9.0-debugsource-9.0.117-1.el9_6.x86_64.rpm SHA-256: 0f4c9301905d90e222218c06fa9a7e9a7e8377581380233d5f35a73c9edc41ab netstandard-targeting-pack-2.1-9.0.117-1.el9_6.x86_64.rpm SHA-256: 58645c3c9e3e75bf12db0c101ef5cf786abaac5f4518406aa4196e9c45ebdd94 Red Hat Enterprise Linux Server - AUS 9.6 SRPM dotnet9.0-9.0.117-1.el9_6.src.rpm SHA-256: a88db851d31dbb95aab80e31cfafd7ef970deeb13853da26024d505447824146 x86_64 aspnetcore-runtime-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: d382a9b9709e17f179c66ee4bd00e5c25ce49ad76d3c8d978e8b1c73d24cd245 aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 6fc962e2a04f2ac72e75848cadb6b9e9177853299b9dd15a6963ad214fc30787 aspnetcore-targeting-pack-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 80ab2e2fa2b83ca9a9f3a22203f4178f3cac7364a50c798ce223c24a6164adad dotnet-apphost-pack-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 746aa709b9f5792fab04d7778e23844d04810870c3835661065578612a46076e dotnet-apphost-pack-9.0-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: d75a8d481419dcf1955e02c06a4dc18690d1b4335c3907afef6a4436a6a1ae1c dotnet-host-9.0.16-1.el9_6.x86_64.rpm SHA-256: 07ed8bb34b27c9f0b551233c6733eb0b5e9965052e8763f0e220ae8f62aec2a0 dotnet-host-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: 50c708dfa64132e443866885873643e429ec2d65a3c1b320c0e4198242d7ef98 dotnet-hostfxr-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 7c629488c9acab40487a125e9a54544327be80fbd4a33df1a773c4b7a7ab3ac6 dotnet-hostfxr-9.0-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: b95933b3f68b28001c9e1f02f7b932021217650ddfd82c8e19f6008a619b0202 dotnet-runtime-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: b5c06f1f8c16aa8fd709601ec8da1892b3bb7733f449c40a565ccf8da2cb2694 dotnet-runtime-9.0-debuginfo-9.0.16-1.el9_6.x86_64.rpm SHA-256: f41cbe6e126f93582957fadc9b4d496068d58c4291f7f7bfb02fe9adc85f91c4 dotnet-runtime-dbg-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: b45d9c1c46d413828a003d961f5a5fafc6790bd502fdbd7db5a61bf39258dda1 dotnet-sdk-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 9f0032d312014b39aacee660de6d366f483014b2ecf59bd4c180855387103661 dotnet-sdk-9.0-debuginfo-9.0.117-1.el9_6.x86_64.rpm SHA-256: 4c3d0aebc08f56129da83a0b4137afa071dc349117992d6b87495982dd1a1634 dotnet-sdk-aot-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 05d8d72a660796def8a139b09444a614c41d518f8a7fbe8fd178f1cf22474910 dotnet-sdk-aot-9.0-debuginfo-9.0.117-1.el9_6.x86_64.rpm SHA-256: 8c6ab1665cd3a132ef45ac0b36bab0ff4fec81da6212b2c340538484571f8fc7 dotnet-sdk-dbg-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 5927534fe15aec3b412a747697f2762fcc7c65178d27bfe7a23f7bfe70374fc2 dotnet-targeting-pack-9.0-9.0.16-1.el9_6.x86_64.rpm SHA-256: 6cd2a9b7d641a01ab5ae7dac6338764fc3ead554c001c479a5ea0732ab971518 dotnet-templates-9.0-9.0.117-1.el9_6.x86_64.rpm SHA-256: 46ede34ed8065efa83432511fa9acccd22fd000a0676008b60195de6b5435a3c dotnet9.0-debuginfo-9.0.117-1.el9_6.x86_64.rpm SHA-256: 1b2227e9fbc87c0eaaffbeba6367c722713448857ca70fc3224eb88a505e27da dotnet9.0-debugsource-9.0.117-1.el9_6.x86_64.rpm SHA-256: 0f4c9301905d90e222218c06fa9a7e9a7e8377581380233d5f35a73c9edc41ab netstandard-targeting-pack-2.1-9.0.117-1.el9_6.x86_64.rpm SHA-256: 58645c3c9e3e75bf12db0c101ef5cf786abaac5f4518406aa4196e9c45ebdd94 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM dotnet9.0-9.0.117-1.el9_6.src.rpm SHA-256: a88db851d31dbb95aab80e31cfafd7ef970deeb13853da26024d505447824146 s390x aspnetcore-runtime-9.0-9.0.16-1.el9_6.s390x.rpm SHA-256: 098f492b58641910330e718168e48718809e5bd21e02d432762da5eda3547cbd aspnetcore-runtime-dbg-9.0-9.0.16-1.el9_6.s390x.rpm SHA-256: beb630109960fcfbd7a4f88c416e958d6c8641c1a24edf585e9e5aa10c66067e aspnetcore-targeting-pack-9.0-9.0.16-1.el9_6.s390x.rpm SHA-256: 84f478cbfe59179f2d7770536b1df07f585b1259bbfa3f436d858b79ba303eb4 dotnet-apphost-pack-9.0-9.0.16-1.el9_6.s390x.rpm SHA-256: f98241a37677d46c2e91ea989adf0dd1e623a4aeac4a5390e428b82dc7bcccc6 dotnet-apphost-pack-9.0-debuginfo-9.0.16-1.el9_6.s390x.rpm SHA-256: 8546c261a8567740caa0afe9722eb7a5169570149fd1f059b0530182b5722a01 dotnet-host-9.0.16-1.el9_6.s390x.rpm SHA-256: 4aa4121f08627adad14c407894e951a3f93993b974ffb0ee56df89df7a4ac49a dotnet-host-debuginfo-9.0.16-1.el9_6.s390x.rpm SHA-256: 7be40baa8edf8e1220b19f731fd1241e7b5f7270045fac1ab2d3c7d0