Red Hat Security Advisory

RHSA-2026:28051

.NET 9.0 security update

Released 2026-06-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el9_6
Red Hat Enterprise Linux AppStream EUS (v.9.6) aspnetcore-runtime-9.0-9.0.17-1.el9_6, aspnetcore-runtime-dbg-9.0-9.0.17-1.el9_6, aspnetcore-targeting-pack-9.0-9.0.17-1.el9_6 +12

TI-2026-33337 CVE-2026-45591 · GHSA-f8h2-vmm9-qhj6

MEDIUM 44

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02481 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +2 CWE-400

TI-2026-33262 CVE-2026-45491 · GHSA-7q4v-2mr6-5gpx

LOW 28

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00388 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +1 CWE-59