RHSA-2026:99173: Low: .NET 11.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.SDK version: 11.0.100~rc.2.26504.105Runtime version: 11.0.0~rc.2.26504.105Security Fix(es): .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): Update .NET 11 to RC 1 [rhel-9.9.z] (JIRA:RHEL-267800) Update .NET 11 to RC 2 [rhel-9.9.z] (JIRA:RHEL-277286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
.NET SDKto a version that resolves this vulnerability.Fixed in 11.0.100~rc.2.26504.105Patch RHEL-277286 - Upgrade
Upgrade
.NET Runtimeto a version that resolves this vulnerability.Fixed in 11.0.0~rc.2.26504.105Patch RHEL-277286
Event History
Frequently Asked Questions
What .NET release level does this update provide?
The update moves .NET 11 to RC 2, with SDK version 11.0.100~rc.2.26504.105 and runtime version 11.0.0~rc.2.26504.105.
Where can I find the vulnerability's impact and CVSS information?
The advisory directs readers to the CVE references for impact details, CVSS scoring, acknowledgments, and related information for CVE-2026-62909.