Red Hat Product Errata RHBA-2025:20988 - Bug Fix Advisory
Issued:
2025-11-11
Updated:
2025-11-11

RHBA-2025:20988 - Bug Fix Advisory

Synopsis

.NET 9.0 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 10.

Description

Bug Fix(es) and Enhancement(s):

  • Update .NET 9.0 to SDK 9.0.110 and Runtime 9.0.9 [rhel-10.1.z] (JIRA:RHEL-112268)
  • Update .NET 9.0 to SDK 9.0.111 and Runtime 9.0.10 [rhel-10.1.z] (JIRA:RHEL-116861)
  • dotnet9.0: .NET Information Disclosure Vulnerability [rhel-10.1.z] (JIRA:RHEL-120573)
  • dotnet9.0: .NET Denial of Service Vulnerability [rhel-10.1.z] (JIRA:RHEL-120617)
  • dotnet9.0: .NET Security Feature Bypass Vulnerability [rhel-10.1.z] (JIRA:RHEL-120594)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 10

SRPM
dotnet9.0-9.0.111-2.el10_1.src.rpm SHA-256: d4ffef65016aa5772022683a86fcd09e5c646d1b5484b048d3fc2b458d85092f
x86_64
aspnetcore-runtime-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: fdcd930830bc1a9e1296c1a452209bf0349ef4fcfa985446c156beaa7b8ca55e
aspnetcore-runtime-dbg-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: b41164bfa7d469c4ad16f66689f97fbef3c164bdf861d439088ed1d5cbb9580a
aspnetcore-targeting-pack-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: 791af56e279d363d079ec4e41e88387d5c57106a655c3bef70a89fccb0da65fd
dotnet-apphost-pack-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: 220c8a5559b66a57b352ae6770720e5de039d211a1477fb3b7399da641664e01
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.x86_64.rpm SHA-256: 12a85ee5e6b915b825d7edd4570cffa6ed8a87c9135b6f6c07c08f5b3850b5a9
dotnet-hostfxr-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: e1b57f704b7ddbc40dcd29a5ad0402a95b6bac6576f189c6e7a7ee5808e7c178
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.x86_64.rpm SHA-256: b8a4be436a29f4a76517dcd77b51bd848fce7370f13fcba499c8bde90facee41
dotnet-runtime-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: a99133a0601b3e57314b93a5e6cbaf7de2bcf3beb7a555fd4ddefe3af4f7e5c1
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.x86_64.rpm SHA-256: 1c70a0a403592e56e33358f52d88cefebc9608975810b3fc76d88273af69e333
dotnet-runtime-dbg-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: c20c3cbeeb975c4d3988d791e6264beb8d208a2cb98f9f5c5929e6e57088fb95
dotnet-sdk-9.0-9.0.111-2.el10_1.x86_64.rpm SHA-256: 36070f50330aabab2d175e998d9e785c88f7222f4cf9f61b1a177c222257d8b9
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.x86_64.rpm SHA-256: 1b85cfedc1202191d0a6bb88a4c3d189ac51e2180797da003acffd17c6cb1bf7
dotnet-sdk-aot-9.0-9.0.111-2.el10_1.x86_64.rpm SHA-256: 8724eb0b94a1743f0cedf8f191241c3446db68ef44a8830f299628b3ef1fa1ee
dotnet-sdk-aot-9.0-debuginfo-9.0.111-2.el10_1.x86_64.rpm SHA-256: f6453b437e4d70327d1994ab6c875975569769d45bd13f37e44eaa38991c17d2
dotnet-sdk-dbg-9.0-9.0.111-2.el10_1.x86_64.rpm SHA-256: 6fcc23856f549f190469e461f31ea202717758cb1c6403ab04d32b75c153e54c
dotnet-targeting-pack-9.0-9.0.10-2.el10_1.x86_64.rpm SHA-256: 5463b9521c01fca2b151fb8430b67c91419c0e1d1e5102620b52ad73d0b1ec63
dotnet-templates-9.0-9.0.111-2.el10_1.x86_64.rpm SHA-256: cfa8c85a1589646b9841f27d0e36d2150467d9ebfdf472b55b061025d27f1b02
dotnet9.0-debugsource-9.0.111-2.el10_1.x86_64.rpm SHA-256: f725ee6c8acb03598263fabb9e3c8bf19da74e78c52541e0f991708859c5c8b3
netstandard-targeting-pack-2.1-9.0.111-2.el10_1.x86_64.rpm SHA-256: 909c3aad42ead3e96158099ad3a27eb380d81dca0891d033c06351a68a1e76b9

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
dotnet9.0-9.0.111-2.el10_1.src.rpm SHA-256: d4ffef65016aa5772022683a86fcd09e5c646d1b5484b048d3fc2b458d85092f
s390x
aspnetcore-runtime-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: 89183dd41e1c5c17145abd7de07c0d50a6622b944620a4d6bfe57f3dc34a2a8b
aspnetcore-runtime-dbg-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: bdfef7363b0333b838fdbcc89c2ff597cfb44f9411a119a77068a92d410d9db1
aspnetcore-targeting-pack-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: 52d1c73af01af912c5191078287ba992bf122b9b5103c23f49192dfdd0e1f7f6
dotnet-apphost-pack-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: cb5d87d5f954fd6e19613cb81777da8f03773ef872fe8d5f2db9f2abb8a0810c
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.s390x.rpm SHA-256: f2f5524cd24779724d67f51d32b97fae2c7568e51145eb0d942b7b1ffe196ea3
dotnet-hostfxr-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: 45c91b8fa5893f916c5b704afbce4f61c55ea39c91b404ab9d0bfb9c6371891c
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.s390x.rpm SHA-256: 2731963a7cd4573545a0a67748de35312ac85fac9bb1a5b62d39088bcce2d0d8
dotnet-runtime-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: ad14040241ef850c4b76770c2a16ac04a6b65eb15aeeb9e7a8b2c24a8c8f1987
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.s390x.rpm SHA-256: 9aa93739a24c86104a9292988faeba23f94221f7011abdaad1a072594baf665c
dotnet-runtime-dbg-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: 8fa558672c0c5ad17f25dc0479ea333e8fdda0d85f5ba72c68bd12678524d36a
dotnet-sdk-9.0-9.0.111-2.el10_1.s390x.rpm SHA-256: 798664b52211a3733e3ebf4e416e9fdcfc8c9aaa459592325f4bf83bc5128930
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.s390x.rpm SHA-256: 665dcbedacb45221ad53e75fa84782408fa6ed1d8a6171753ab4c2ac43fd47f6
dotnet-sdk-dbg-9.0-9.0.111-2.el10_1.s390x.rpm SHA-256: d668df39a0c5225a8ecaa9c8394ebf8fc247bf360b877d9b84b1b63408d04366
dotnet-targeting-pack-9.0-9.0.10-2.el10_1.s390x.rpm SHA-256: 632eec901ecb93b9ead83330931cec6b8dc0dc8183166249bf5bd021b7910842
dotnet-templates-9.0-9.0.111-2.el10_1.s390x.rpm SHA-256: 6c5e5fe41404fda65c03689fe9c054da8bb563d77fe725624061a6d19a675be2
dotnet9.0-debugsource-9.0.111-2.el10_1.s390x.rpm SHA-256: cf52e7a43b0dd40fea4d11d82214706a94780c08cc4f262d9140975e199402ef
netstandard-targeting-pack-2.1-9.0.111-2.el10_1.s390x.rpm SHA-256: fef105bcae7188f205cbf600238f84d3dfdf0c59f808248145a91632e8f5612e

Red Hat Enterprise Linux for Power, little endian 10

SRPM
dotnet9.0-9.0.111-2.el10_1.src.rpm SHA-256: d4ffef65016aa5772022683a86fcd09e5c646d1b5484b048d3fc2b458d85092f
ppc64le
aspnetcore-runtime-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: aaa02b7d91ee3568f5516262cacd7fe7e79f8c5ec7145fc9c009c3dc13364db3
aspnetcore-runtime-dbg-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: e1d37d11418474b61a462ff334a1e05916cc854eb1260bfe13d34f1a8d77012d
aspnetcore-targeting-pack-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 3ef50335bc6de968eaaf563614d1fe16eead7d9ba5172e3638afb99169bd10ff
dotnet-apphost-pack-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: f9dc297d6e22d66a1e1a95b8f5d40f5fc455c7483e9de5a0998295fbfd6440e9
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 893ae60702c9c791118d94eb6de8cd2f0fd9ea94840d88024019c3a7efbca3f9
dotnet-hostfxr-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: a321090dd4ee24cb1b5bfa240af0d1533909226fdec85c38a8b970c78438c109
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 5d10e2667812248c479e8fb1f9971d11a8c5c6e0a491c2dfdd837810f26645bd
dotnet-runtime-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 0ecb43816783f9c8b9235b779b19f034400a6d88946f8ffe368495e05ceb3a78
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 96d9a884e0dc601e9e3102a224f9446db35bfccdc5574240e8c6e1096244c832
dotnet-runtime-dbg-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: ef4fb403d0e9e5f7ba7b6af44038869f865a2b8eca4b6682253458481adaeba7
dotnet-sdk-9.0-9.0.111-2.el10_1.ppc64le.rpm SHA-256: c3fc6d49e113c7d34dcadee6c51fc94c639c6573acdc5a96fca917c13de8e698
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.ppc64le.rpm SHA-256: 1378acd7bc39de7d8c624906d78d8e76e5a5d65e2a90781eec9d4a3a5257be2d
dotnet-sdk-dbg-9.0-9.0.111-2.el10_1.ppc64le.rpm SHA-256: bb24c7a5ac108630c038e0aff7b242b1a8187c7f92f64efaa17372426bcb8879
dotnet-targeting-pack-9.0-9.0.10-2.el10_1.ppc64le.rpm SHA-256: c81785c7a6ccf6ccdfdc0d475fe74735d66ccc304d93e2cc6172c8b68c199f80
dotnet-templates-9.0-9.0.111-2.el10_1.ppc64le.rpm SHA-256: 690c769be08a06aa76ffd1ae38c2cc5c7e2187e4629b7334dfe8a9f134c5f43b
dotnet9.0-debugsource-9.0.111-2.el10_1.ppc64le.rpm SHA-256: 6917fff25e8164d9f70b099d4870ea6d1242e4ca6652018d7d2d7b4e5961ab92
netstandard-targeting-pack-2.1-9.0.111-2.el10_1.ppc64le.rpm SHA-256: fb6550fbf8193c4eb918b26cb4b9b52095d9b203bfc4eb032e460d3d3cf12951

Red Hat Enterprise Linux for ARM 64 10

SRPM
dotnet9.0-9.0.111-2.el10_1.src.rpm SHA-256: d4ffef65016aa5772022683a86fcd09e5c646d1b5484b048d3fc2b458d85092f
aarch64
aspnetcore-runtime-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: b425b115537cf7ba59dd1c574f47000f04d74ed1743ac9cfabd98743f2f56e92
aspnetcore-runtime-dbg-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: 905432e5f4e44e323dfe79223e771a345563dedef0f0f432aa41f3c434dc1cff
aspnetcore-targeting-pack-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: 6d923000c3ee5fd5d58347641f3c6ccf42b7d0171fb92dca8236d78b928a398f
dotnet-apphost-pack-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: b9a508f31766f586cefe0edc33e6f95d2765a67ded4014dd872890322b3fe953
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.aarch64.rpm SHA-256: 51ca127f28ca79f520c6e1dfb4bb0cf7769a03872a636c9bb85d714c67e4a4bc
dotnet-hostfxr-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: 55eb4bdc511b0d12fc0d306497f4c99b66dfe633070b64f5c2e74fb3a21f87bd
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.aarch64.rpm SHA-256: 38e80a2a6ceb734a32ba0608c9c1e24120025cacb15f1edae8300d379add0bf1
dotnet-runtime-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: 961457eb9638939faf6a99f852bf326a4f1f538ffa7f8f3b97db0c9450b4c661
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.aarch64.rpm SHA-256: b368db4c91a8f85d0563a15d6809d060346056326c10e44f1458ca3b3449d1d5
dotnet-runtime-dbg-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: a3d97bcffa563777b7299ec9ee8209ff093c49bcf8b3966d402a17dba4e1e3d6
dotnet-sdk-9.0-9.0.111-2.el10_1.aarch64.rpm SHA-256: e72df8feebebc7eea7f3804c0e5510d1b75a29cdb0c2bc150e160c9687260c56
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.aarch64.rpm SHA-256: c0eddb2ac189eac01d0921e3c41cc7a1123c2c5af6cd71ce507d0d0b889687a0
dotnet-sdk-aot-9.0-9.0.111-2.el10_1.aarch64.rpm SHA-256: a1ef7d7085056af70ca6487b32e01cd5bde8eb453d1953d8031cffcdfa5a10af
dotnet-sdk-aot-9.0-debuginfo-9.0.111-2.el10_1.aarch64.rpm SHA-256: 113b535d910aac1f34bef1d05d89a20b51194338a9beafec9674c7e45ff3157a
dotnet-sdk-dbg-9.0-9.0.111-2.el10_1.aarch64.rpm SHA-256: 58bf43dd1d69540d4e144bbeb4244c75ae80452d58ed9507c6e1c91501942e37
dotnet-targeting-pack-9.0-9.0.10-2.el10_1.aarch64.rpm SHA-256: ec204dbb2a5030babce5fa5477cb5136435301f7137e7d86d5ed77afa52926e0
dotnet-templates-9.0-9.0.111-2.el10_1.aarch64.rpm SHA-256: b185c88b820b9aa564581b979768273867baae029fd865387d63f2294092c845
dotnet9.0-debugsource-9.0.111-2.el10_1.aarch64.rpm SHA-256: 474f34ca7ef7233ac6fa8365cca1d837cdcf1014998109d24cf5724b725d3345
netstandard-targeting-pack-2.1-9.0.111-2.el10_1.aarch64.rpm SHA-256: c6bf5c524314c60003ce57ca022ca49a21c742d11bb47947a9713c65da73bd43

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.x86_64.rpm SHA-256: 12a85ee5e6b915b825d7edd4570cffa6ed8a87c9135b6f6c07c08f5b3850b5a9
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.x86_64.rpm SHA-256: b8a4be436a29f4a76517dcd77b51bd848fce7370f13fcba499c8bde90facee41
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.x86_64.rpm SHA-256: 1c70a0a403592e56e33358f52d88cefebc9608975810b3fc76d88273af69e333
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.x86_64.rpm SHA-256: 1b85cfedc1202191d0a6bb88a4c3d189ac51e2180797da003acffd17c6cb1bf7
dotnet-sdk-9.0-source-built-artifacts-9.0.111-2.el10_1.x86_64.rpm SHA-256: 5ef927d5ef29eded03a6fa1f0ab49cca9548cd5844e283f226820f28d3cfff6e
dotnet-sdk-aot-9.0-debuginfo-9.0.111-2.el10_1.x86_64.rpm SHA-256: f6453b437e4d70327d1994ab6c875975569769d45bd13f37e44eaa38991c17d2
dotnet9.0-debugsource-9.0.111-2.el10_1.x86_64.rpm SHA-256: f725ee6c8acb03598263fabb9e3c8bf19da74e78c52541e0f991708859c5c8b3

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 893ae60702c9c791118d94eb6de8cd2f0fd9ea94840d88024019c3a7efbca3f9
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 5d10e2667812248c479e8fb1f9971d11a8c5c6e0a491c2dfdd837810f26645bd
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.ppc64le.rpm SHA-256: 96d9a884e0dc601e9e3102a224f9446db35bfccdc5574240e8c6e1096244c832
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.ppc64le.rpm SHA-256: 1378acd7bc39de7d8c624906d78d8e76e5a5d65e2a90781eec9d4a3a5257be2d
dotnet-sdk-9.0-source-built-artifacts-9.0.111-2.el10_1.ppc64le.rpm SHA-256: 625b7718c1ad8d8412dd5a7cea27ccfb16aecdfdcf187e328d9c094061257f13
dotnet9.0-debugsource-9.0.111-2.el10_1.ppc64le.rpm SHA-256: 6917fff25e8164d9f70b099d4870ea6d1242e4ca6652018d7d2d7b4e5961ab92

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.aarch64.rpm SHA-256: 51ca127f28ca79f520c6e1dfb4bb0cf7769a03872a636c9bb85d714c67e4a4bc
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.aarch64.rpm SHA-256: 38e80a2a6ceb734a32ba0608c9c1e24120025cacb15f1edae8300d379add0bf1
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.aarch64.rpm SHA-256: b368db4c91a8f85d0563a15d6809d060346056326c10e44f1458ca3b3449d1d5
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.aarch64.rpm SHA-256: c0eddb2ac189eac01d0921e3c41cc7a1123c2c5af6cd71ce507d0d0b889687a0
dotnet-sdk-9.0-source-built-artifacts-9.0.111-2.el10_1.aarch64.rpm SHA-256: cd5562129a659fa3ea46e2dd0315cc7cdb44884990b6e75ee43d3af1fe4a5e18
dotnet-sdk-aot-9.0-debuginfo-9.0.111-2.el10_1.aarch64.rpm SHA-256: 113b535d910aac1f34bef1d05d89a20b51194338a9beafec9674c7e45ff3157a
dotnet9.0-debugsource-9.0.111-2.el10_1.aarch64.rpm SHA-256: 474f34ca7ef7233ac6fa8365cca1d837cdcf1014998109d24cf5724b725d3345

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
dotnet-apphost-pack-9.0-debuginfo-9.0.10-2.el10_1.s390x.rpm SHA-256: f2f5524cd24779724d67f51d32b97fae2c7568e51145eb0d942b7b1ffe196ea3
dotnet-hostfxr-9.0-debuginfo-9.0.10-2.el10_1.s390x.rpm SHA-256: 2731963a7cd4573545a0a67748de35312ac85fac9bb1a5b62d39088bcce2d0d8
dotnet-runtime-9.0-debuginfo-9.0.10-2.el10_1.s390x.rpm SHA-256: 9aa93739a24c86104a9292988faeba23f94221f7011abdaad1a072594baf665c
dotnet-sdk-9.0-debuginfo-9.0.111-2.el10_1.s390x.rpm SHA-256: 665dcbedacb45221ad53e75fa84782408fa6ed1d8a6171753ab4c2ac43fd47f6
dotnet-sdk-9.0-source-built-artifacts-9.0.111-2.el10_1.s390x.rpm SHA-256: df815c8864c2ea369f008e3c7b303bdfda96cecb125ed823e67ffbb90df2fa84
dotnet9.0-debugsource-9.0.111-2.el10_1.s390x.rpm SHA-256: cf52e7a43b0dd40fea4d11d82214706a94780c08cc4f262d9140975e199402ef

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.