Back Linuxsecurity

Fedora 43 dotnet9.0 Important Security Update Runtime Fixes 2026

Linuxsecurity •LinuxSecurity Advisories • June 28, 2026

Update to .NET SDK 9.0.118 and Runtime 9.0.17 Fixes: CVE-2026-45490,CVE-2026-45491,CVE-2026-45591 Release Notes: SDK: notes/9.0/9.0.17/9.0.118.md Runtime: notes/9.0/9.0.17/9.0.17.md

* Wed Jun 17 2026 Omair Majid - 9.0.118-1 - Update to .NET SDK 9.0.118 and Runtime 9.0.17

Fedora Update Notification FEDORA-2026-2954cd11bd 2026-06-28 01:07:37.246038+00:00 Name : dotnet9.0 Product : Fedora 43 Version : 9.0.118 Release : 1.fc43 URL : Summary : .NET Runtime and SDK Description : .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2954cd11bd' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Updates for .NET SDK and Runtime Address Multiple CVEs On June 28, 2026, Fedora released critical updates for .NET SDK and Runtime versions 8.0, 9.0, and 10.0 to address vulnerabilities CVE-2026-45490, CVE-2026-45491, and CVE-2026-45591. These vulnerabilities were published on June 9, 2026, and affect multiple Fedora versions, including 43 and 44. The updates were initiated by developer Omair Majid on June 16, 2026, and include enhancements and fixes for security issues. Users are advised to upgrade to the latest SDK and Runtime versions to mitigate risks. The updates can be installed using the 'dnf' package manager. The vulnerabilities could allow unauthorized access or execution of malicious code, posing a significant risk to affected systems. Immediate action is recommended for users running the impacted versions. 6 sources 72

Extracted Entities

CVEs (3)

CVE-2026-45490 CVE-2026-45491 CVE-2026-45591

Platforms (3)

Linux MacOS Windows