Red Hat Product Errata RHSA-2026:24333 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24333 - Security Advisory Overview Updated Packages Synopsis Important: .NET 9.0 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for .NET 9.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es): dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2476605 - CVE-2026-42899 dotnet: .NET: infinite loop allows an attacker to cause a denial of service CVEs CVE-2026-42899 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM dotnet9.0-9.0.117-1.el10_0.src.rpm SHA-256: e11ee47e572c0b477da20bc5bffe9c633a3150a792264b2a84f32e0d0c9156d7 x86_64 aspnetcore-runtime-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: 62ad4500003172d0b2e15c2d2c4e7eb38f375df0c70f43c4269f38823399a653 aspnetcore-runtime-dbg-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: cc80ec683bfcb9523e47cee92109e90732d3b68d59513b45be4ac06d98dde301 aspnetcore-targeting-pack-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: 74a6c34d6862976e581875abe37a584bfa583f07a9b122da9b65bf46e46284b9 dotnet-apphost-pack-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: 6780d40272ffe7fe2390ac0fdb304728cce734b6cddd5007b20914f316f525f8 dotnet-apphost-pack-9.0-debuginfo-9.0.16-1.el10_0.x86_64.rpm SHA-256: 76de7fb89ea5a7be7f4d9f3483b1bed30a7eb7185ec38dd2cbe53af69af4bbfc dotnet-host-9.0.16-1.el10_0.x86_64.rpm SHA-256: d19f14e77b886471deb1a0ceee4e87981dfabbd38c1d3749d50889d6068a2cea dotnet-host-debuginfo-9.0.16-1.el10_0.x86_64.rpm SHA-256: b420c57cebf4a9faa91b1fe31e98f6ef6068a1014aa0991a1f4d3e173800cb18 dotnet-hostfxr-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: 7a601f1d431849961fe6a2ee8fc40b3df26745a14718627bddf07921f3ffbda4 dotnet-hostfxr-9.0-debuginfo-9.0.16-1.el10_0.x86_64.rpm SHA-256: 719b78fcfafbf7edf52d399b570d204dc4b93060f02ad990cafb406e027113be dotnet-runtime-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: 744ba91897cf02d758c86223ab36c849657839f86feea30154a58354d8d85d67 dotnet-runtime-9.0-debuginfo-9.0.16-1.el10_0.x86_64.rpm SHA-256: 5375e6b402a6e61d24a43747d693e632f9660b9b4c7a884b491de2af03093874 dotnet-runtime-dbg-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: b43939d6e096fe29468ed7e5acc217c3dd21682e9e1bcd905c706e480e303d69 dotnet-sdk-9.0-9.0.117-1.el10_0.x86_64.rpm SHA-256: ef9567820fc1e1d4bde7a85094162386552e872e4d98a700d4af0c54c5661b09 dotnet-sdk-9.0-debuginfo-9.0.117-1.el10_0.x86_64.rpm SHA-256: c307576c9df7aad4e2bcf363dbaad39751a5b7d25240d72e02b030d0e6e8ab05 dotnet-sdk-aot-9.0-9.0.117-1.el10_0.x86_64.rpm SHA-256: 65647e53acd93bf4bcaa36738f9b470cfe7411315c9bda0b8de00b9ae255cb9b dotnet-sdk-aot-9.0-debuginfo-9.0.117-1.el10_0.x86_64.rpm SHA-256: 657f6e36b5f78d1e5426ed94662724869870a80b1b7a75f23393f1e8da7d220d dotnet-sdk-dbg-9.0-9.0.117-1.el10_0.x86_64.rpm SHA-256: 84687f5a1f4db677c36073b8451b545a2f2546c6d8b54ab74513c140a7c24dde dotnet-targeting-pack-9.0-9.0.16-1.el10_0.x86_64.rpm SHA-256: 964055e3d3e6b4ccc1ad39fe30e42c5bdb94069fa7a2a8d1cb1d0e593ee97c67 dotnet-templates-9.0-9.0.117-1.el10_0.x86_64.rpm SHA-256: 3d955d05f08b06e52f6f635fd1c956ff59632bcf31b800d5ba8b8a8ab920725c dotnet9.0-debugsource-9.0.117-1.el10_0.x86_64.rpm SHA-256: b4da475d3a0b42346127a1778536355ea1badb92cac6b1296f79ffd1b57eebfb netstandard-targeting-pack-2.1-9.0.117-1.el10_0.x86_64.rpm SHA-256: ab8dacc9af4beddaec1df1f7b8e2d6add079d46cc8908f05c1b12d91dbbf9c7d Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM dotnet9.0-9.0.117-1.el10_0.src.rpm SHA-256: e11ee47e572c0b477da20bc5bffe9c633a3150a792264b2a84f32e0d0c9156d7 s390x aspnetcore-runtime-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: f413190273f2416ee91b6516c1fd93fb90162eecb191311b0a0cba9961d5238c aspnetcore-runtime-dbg-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: 04006342aed1072346db12f5cc0be7dc39e2c5b3b7b9da8f8de09277d0b63e28 aspnetcore-targeting-pack-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: 21a3a7bb6369e67ee57023794a5db8afd8777dd3e96d73964b807ee00177ab54 dotnet-apphost-pack-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: 768c63574a35f64e8012e7efba141f7944a1ee9ccc198d7b2dbf767cdf2ffa41 dotnet-apphost-pack-9.0-debuginfo-9.0.16-1.el10_0.s390x.rpm SHA-256: 1015e385b5519ffaa7eeb1bbeb834efc4c4e30a6aa71f8f6ecbf15fb225b3492 dotnet-host-9.0.16-1.el10_0.s390x.rpm SHA-256: df9154ebf12dddfaefc4a61cf57dd28043709a187ce81201a5a40ba638d3f6a4 dotnet-host-debuginfo-9.0.16-1.el10_0.s390x.rpm SHA-256: e35718de04ec5566dd41229975a3755cc028692b4fd7ed83d9919561c5876028 dotnet-hostfxr-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: b1f46381cf2dd72e38f23b77764c510e4244aa538341a6d09a75913830efd79d dotnet-hostfxr-9.0-debuginfo-9.0.16-1.el10_0.s390x.rpm SHA-256: e7403c025d5f8fc29021ed4f1d8c88767bf35173cf0e68ea01e5e1fa3e2cfda5 dotnet-runtime-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: 1dfb63f3f31a85ccd28519769917091e8ea7cb3d12a4228dc46a4306a03b9379 dotnet-runtime-9.0-debuginfo-9.0.16-1.el10_0.s390x.rpm SHA-256: f466d6b0b76fb433d46c643341b7f234874a3f9351b0a89a71be04dee8e30718 dotnet-runtime-dbg-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: 6794d0b0bcdd40ea836c857eda38c2b018cf3673b21afee0a991f4b78b7dca07 dotnet-sdk-9.0-9.0.117-1.el10_0.s390x.rpm SHA-256: c7332443888e2f34f12866b8a616aaf21f7002738b6aae7816661f7610ce7493 dotnet-sdk-9.0-debuginfo-9.0.117-1.el10_0.s390x.rpm SHA-256: 6f14590d45facfb9df0e80b3704d34884ff166a4555a10212b5a421820c95fc3 dotnet-sdk-dbg-9.0-9.0.117-1.el10_0.s390x.rpm SHA-256: 3bedcc5fe845e6bce0170baadda99c7f4df8e875a3833d55806d16f2a2c74122 dotnet-targeting-pack-9.0-9.0.16-1.el10_0.s390x.rpm SHA-256: 0d32ad6e17d84504a2ac284e9b670d57a4a2c7738f96dfebb6a047b2f8d2670f dotnet-templates-9.0-9.0.117-1.el10_0.s390x.rpm SHA-256: 1fd23b48757c85d202112bc70600ccde155d2b43e1f517f8bf1436ad9f66720a dotnet9.0-debugsource-9.0.117-1.el10_0.s390x.rpm SHA-256: 38a8b85cfcef1d295b271ebd044f2d0ff94236a4dfc86586e14f0c70968249b1 netstandard-targeting-pack-2.1-9.0.117-1.el10_0.s390x.rpm SHA-256: 5ad658e3dc732274a9b7cd5854616bf082974475318d6ac3bf92f10289ea62b9 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM dotnet9.0-9.0.117-1.el10_0.src.rpm SHA-256: e11ee47e572c0b477da20bc5bffe9c633a3150a792264b2a84f32e0d0c9156d7 ppc64le aspnetcore-runtime-9.0-9.0.16-1.el10_0.ppc64le.rpm SHA-256: bb7479be8aba47d034a20799310475709df6bb63217e748d082d33339458b0ae aspnetcore-runtime-dbg-9.0-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 67bfef871724bac5719f05e49349f26a74c16f5be456a2fe28c276387ef169f3 aspnetcore-targeting-pack-9.0-9.0.16-1.el10_0.ppc64le.rpm SHA-256: f4b3e67eca50333c040aea2effd1725be692e270d10a006c97e294c4e76cc7ee dotnet-apphost-pack-9.0-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 3362824a7d428b0090cb31908eb8de4d5ee6d6ae837b3c0c4cff76a0d9dc1fa0 dotnet-apphost-pack-9.0-debuginfo-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 02809404ec2bda76ea0a13010fa7c6290dceea312b542ee2154e72df37be0758 dotnet-host-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 69db812055e8fe44381c1bbb856cb83aa9e5834cc09b808e2c5cc36befeda8fe dotnet-host-debuginfo-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 59cd92457a55558fe367f3997479cecdbd9307551f1d41b015abd5f15911438a dotnet-hostfxr-9.0-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 24ebd4843e49970b558568cd8eccb7ee13a88904a8780ee6e848e093916127b2 dotnet-hostfxr-9.0-debuginfo-9.0.16-1.el10_0.ppc64le.rpm SHA-256: e4d9c229f37aebd31667393a465ad8a0cf57758dc065129f970b27cf81ba7e6b dotnet-runtime-9.0-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 4e79f088c3306e2db264391f55338b176f9566043d08e23b1fe7d3f3db5cdc6b dotnet-runtime-9.0-debuginfo-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 08f025d781a3ef6e028f510dfd03fe3396e2349d6a25543a9e9324da250e13f4 dotnet-runtime-dbg-9.0-9.0.16-1.el10_0.ppc64le.rpm SHA-256: 2b00437f2b1467d15fbc01a347cab3fd014305f393396783a578e0dfe6333397 dotnet-sdk-9.0-9.0.117-1.el10_0.ppc64le.rpm SHA-256: 70103bb79878223923b97665d4410735960d5aa009b02f5fcd1847d3d351a65d dotnet-s