[ALSA-2026:25115] Important: .NET 10.0 security update
Type:
security
Severity:
important
Release date:
2026-06-11
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-targeting-pack-10.0-10.0.9-1.el10_2.aarch64.rpm 2f04ac800c5bc7ce384036b24565265c1a22c548a43b0a95876285aae47808ff
aarch64 dotnet-templates-10.0-10.0.109-1.el10_2.aarch64.rpm 338178bf771bfee068a15fe3b8082e81b465ab8e725f49f9b45b7fece1a295c6
aarch64 dotnet-runtime-dbg-10.0-10.0.9-1.el10_2.aarch64.rpm 41b45755fa4b743b0e20a44f047b6f8350b54103522c6ecf336a49a2ec8961f7
aarch64 dotnet-hostfxr-10.0-10.0.9-1.el10_2.aarch64.rpm 7079c3822abcc01d642544244b4e993a911e16ad6952c31a32ca96a154a64907
aarch64 aspnetcore-targeting-pack-10.0-10.0.9-1.el10_2.aarch64.rpm 87f62074f401291f0f063a81a58724f7e6e21bdab76272a36c6f97d6ca143783
aarch64 dotnet-runtime-10.0-10.0.9-1.el10_2.aarch64.rpm 922d7c9c012d7aa5873f257a1210b9de4177873a9d91221d943b120304a25723
aarch64 aspnetcore-runtime-dbg-10.0-10.0.9-1.el10_2.aarch64.rpm 92fc8250ec51f778411b248d364fe074a35a6bb917bec07baed1659d84da9d49
aarch64 dotnet-host-10.0.9-1.el10_2.aarch64.rpm 98009216e3ada4b787bf9622f7109da299ec1e6c2c156d703ca26d015fc5d649
aarch64 dotnet-sdk-dbg-10.0-10.0.109-1.el10_2.aarch64.rpm aa7c1106b40a4bd1276828446f85956bece5b51cf4fde008944173c3cf6cf3eb
aarch64 dotnet-sdk-aot-10.0-10.0.109-1.el10_2.aarch64.rpm c4c8debd6e21bd247ace153a41973da3888e33e64b071041cbf50842813049ea
aarch64 dotnet-apphost-pack-10.0-10.0.9-1.el10_2.aarch64.rpm ca1bc8b3e4a7408ecc6f66a305890d0972c707c290c385f2c2227d5847b65e27
aarch64 aspnetcore-runtime-10.0-10.0.9-1.el10_2.aarch64.rpm d1d6e204b3625d911aaa0bce5444cb06e6076dfd470723df4a69363cd1fee51f
aarch64 dotnet-sdk-10.0-10.0.109-1.el10_2.aarch64.rpm d9ae9171cb02aab0d254d6ef28e73cf08cc8545581a71465d187943bd9b1c015
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el10_2.aarch64.rpm eb86728f2be05b69933d922f2d5295b9816f49ba41d3ccd19a95384ee154df14
ppc64le dotnet-runtime-dbg-10.0-10.0.9-1.el10_2.ppc64le.rpm 124fc7bb95b6be41877a2c39d7f821c5aaadfab2735dca57dd75bdcd372380b3
ppc64le dotnet-host-10.0.9-1.el10_2.ppc64le.rpm 255cda9619cd28c639bf16566a4d859c8a45d9ee20e6a8ce345cd6fc7aa685b8
ppc64le dotnet-hostfxr-10.0-10.0.9-1.el10_2.ppc64le.rpm 370130a264b81b1411a69375b35f138b4894c4728c6c1639db1e2144135a0e4b
ppc64le dotnet-targeting-pack-10.0-10.0.9-1.el10_2.ppc64le.rpm 396fc654533e64d1d20cdd9689049ed8c9b12d1cc18868cb53e91be3b3674d12
ppc64le aspnetcore-runtime-10.0-10.0.9-1.el10_2.ppc64le.rpm 5e0c865259752a6ebaa1d993c773a97815aeeefac5c2959b91b800f2bd9906c0
ppc64le aspnetcore-targeting-pack-10.0-10.0.9-1.el10_2.ppc64le.rpm 8f75ad82d2acf7421eb8d18135cbad42049af8a72c8f3779a658778f852220e4
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el10_2.ppc64le.rpm 9ad13d30a8d0d9ca0c7c2ecdc3435e824ba9b0e5bd65ea5c263cc6e0435eef19
ppc64le aspnetcore-runtime-dbg-10.0-10.0.9-1.el10_2.ppc64le.rpm b0ef682d0da5643a37ac61552c7e06b60986e4bfd63c7ff4defd3bf22764d332
ppc64le dotnet-templates-10.0-10.0.109-1.el10_2.ppc64le.rpm b164745ff65124418f639cdc15039cd00e264227445544c127032a271bfcefe4
ppc64le dotnet-sdk-dbg-10.0-10.0.109-1.el10_2.ppc64le.rpm bd72dd69c269ff9af993a2af4d8e95f3d4863f9b968f362717b75431bacb0308
ppc64le dotnet-apphost-pack-10.0-10.0.9-1.el10_2.ppc64le.rpm ec16ab9f0aeb149ff9da0ce330c2aa6df177c404ae5ad3f64df3c9e56fec72a4
ppc64le dotnet-sdk-10.0-10.0.109-1.el10_2.ppc64le.rpm ee37e942fa90222defdf4da1142797935eb89b4489996ba5c477db28f0ee6b03
ppc64le dotnet-runtime-10.0-10.0.9-1.el10_2.ppc64le.rpm f3467b078813786f5b6243e1ed6f5f40f303c498291b0ff12f1876db951b8ff6
s390x dotnet-runtime-dbg-10.0-10.0.9-1.el10_2.s390x.rpm 2393f68d6727017ce5cbbe61b465884e682c37e18e5c7200a0cd1f96b2ecd351
s390x aspnetcore-targeting-pack-10.0-10.0.9-1.el10_2.s390x.rpm 496211fbbcd5278bcd57827c55337ae37a7bde23aae90180d46985eecbcc855e
s390x dotnet-sdk-10.0-10.0.109-1.el10_2.s390x.rpm 60d5463fc9b68f43c05811c3ef719aa9bac6f5a646eeda9e60d67bd231daa96e
s390x dotnet-host-10.0.9-1.el10_2.s390x.rpm 6d87746fa976fa1aa86471695159a23a9005fa37e91e2d535b0f06da29fdaa21
s390x dotnet-runtime-10.0-10.0.9-1.el10_2.s390x.rpm 7288980cd05f2f61772368862f54ced41cc3672587dcdd1c7623d3fe3bce5f55
s390x aspnetcore-runtime-dbg-10.0-10.0.9-1.el10_2.s390x.rpm 76a1036a615ae1ef6edabb8d0afb9e2867af02f4c1bf35e9154771b4a8a513b7
s390x dotnet-templates-10.0-10.0.109-1.el10_2.s390x.rpm 93c6c298752dddb548e323989ee92c00ac732584ff6579c1efbccc46dd31ba08
s390x dotnet-hostfxr-10.0-10.0.9-1.el10_2.s390x.rpm 979e194e09eff8cbb3c1a88e2c21533f969baa6aaf2236fbdae856479ee71dac
s390x aspnetcore-runtime-10.0-10.0.9-1.el10_2.s390x.rpm c54b9add89234aad0a54adecebe08cf971d5dfdf7c4cd120e41ba50e519a40f9
s390x dotnet-apphost-pack-10.0-10.0.9-1.el10_2.s390x.rpm ccb8de86787209dea955b077752129cae857d4499a09d9e9672f98514c000529
s390x dotnet-targeting-pack-10.0-10.0.9-1.el10_2.s390x.rpm d027b3bc4ecfd1351be4575872e6df37b68d26f5a0aed833d40888ff9da8a349
s390x dotnet-sdk-dbg-10.0-10.0.109-1.el10_2.s390x.rpm d6eee2a7ea77aae5b8b2ff0afc9ea7ef13e2f7b267d41909e3be12bf47ced94c
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el10_2.s390x.rpm fa85a6e7de3edc8b8276f4b4ba73fbd6bdf9078d82450dfef82a87df26dcfd82
x86_64 dotnet-host-10.0.9-1.el10_2.x86_64.rpm 033de8a7c3c691f1d05a978a806888160790ef6235a2ab087eb14850cf1a3c88
x86_64 aspnetcore-runtime-dbg-10.0-10.0.9-1.el10_2.x86_64.rpm 0e889592948d51882116ecb689d98764a8226b71b35e55f95beaefd68f5f45da
x86_64 dotnet-runtime-dbg-10.0-10.0.9-1.el10_2.x86_64.rpm 0eb607077e250fe29d3cf85e6e3d22150182f3d951350910dc231430fe018c3d
x86_64 aspnetcore-runtime-10.0-10.0.9-1.el10_2.x86_64.rpm 41f52876b05e07b7970d9d6ab72e2fa4fc00b73a43126d969e8c036f0c454031
x86_64 dotnet-sdk-aot-10.0-10.0.109-1.el10_2.x86_64.rpm 4717318670060c2f8131b9500e8345ef3b51b6e85fbdb2784a604d17b8e86a4a
x86_64 dotnet-apphost-pack-10.0-10.0.9-1.el10_2.x86_64.rpm 47f499d27e81167892427547fb2e31b807eb13b2720287cc3a00e99a1efdd363
x86_64 dotnet-sdk-10.0-10.0.109-1.el10_2.x86_64.rpm 4a47c6d3d25eb0e1cd63e11aef0eaf53198ff28c78085a26c7fedf095f430363
x86_64 dotnet-hostfxr-10.0-10.0.9-1.el10_2.x86_64.rpm 926f0797b57e7b4f88dd7bdd64f5e96990c91e195e01ff33afcd04eb2571f424
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el10_2.x86_64.rpm b912b08cc0618398e241a9dbff68448b5ee688951ca1a5681ecd75374ac1a85c
x86_64 dotnet-sdk-dbg-10.0-10.0.109-1.el10_2.x86_64.rpm bc6274a8bca16e28bf2e457220a8a61bbb62f51f442951366bb6c6436a24359c
x86_64 aspnetcore-targeting-pack-10.0-10.0.9-1.el10_2.x86_64.rpm d7122798a88dd58bc17f7071c97c3685f442834b0ee653d24ab30fee687a7431
x86_64 dotnet-targeting-pack-10.0-10.0.9-1.el10_2.x86_64.rpm d99617e92030bd40bde22bd7f423366e66b15221d9421f7d024962ef08737b14
x86_64 dotnet-templates-10.0-10.0.109-1.el10_2.x86_64.rpm f69c5a93dbff29b96b4ee2461352533e681c6d1ed75725c9de108887830d5831
x86_64 dotnet-runtime-10.0-10.0.9-1.el10_2.x86_64.rpm fcc1bed016fbe0568602b7c156085b1d8430c73fb89c0ba64430b460fb7f15c0
x86_64_v2 dotnet-hostfxr-10.0-10.0.9-1.el10_2.x86_64_v2.rpm 1ca57f1f2540dcaa17ef3146944255f599a5afd13d60a8674bec47975e910647
x86_64_v2 dotnet-apphost-pack-10.0-10.0.9-1.el10_2.x86_64_v2.rpm 29dfd4c0857a95c8215b139643c894234edcd3755df26e8a4f4931fb0cb7da7f
x86_64_v2 dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el10_2.x86_64_v2.rpm 333f189eb5634d79e3e6cde45083859fbd36f60f263bbed00b084ad743673391
x86_64_v2 dotnet-targeting-pack-10.0-10.0.9-1.el10_2.x86_64_v2.rpm 96f6c4ebc41a9f8eb9b41a38d19e0022cd631f6bb1c608a1f1ecbfccc73a4ff2
x86_64_v2 aspnetcore-runtime-dbg-10.0-10.0.9-1.el10_2.x86_64_v2.rpm 9e8bbf9ee25f9031a16b605fafab8623a8c930a0c6956be76a2071781677f939
x86_64_v2 dotnet-runtime-dbg-10.0-10.0.9-1.el10_2.x86_64_v2.rpm a0cfceb0db2d1fad25068e6b0e7f639bd4390aa72098e5556aee5f1bbeb800ea
x86_64_v2 dotnet-sdk-dbg-10.0-10.0.109-1.el10_2.x86_64_v2.rpm a2a8496e33bbb2960f2c4e65701ea7ae34ead14c8bf0b24396901cf9c0678a00
x86_64_v2 aspnetcore-targeting-pack-10.0-10.0.9-1.el10_2.x86_64_v2.rpm b0fce5e40b2bebb55752181986e891badb2262416935631d6b2dd824776e7696
x86_64_v2 dotnet-host-10.0.9-1.el10_2.x86_64_v2.rpm c2d7f156c3d432b8002cc6fe6de55ccb36cc149de0972a47fbf1f55129060022
x86_64_v2 dotnet-runtime-10.0-10.0.9-1.el10_2.x86_64_v2.rpm c80ecb08315e85b6b073722130ef553b61748bdc110b8e0aafd139e3b5472587
x86_64_v2 aspnetcore-runtime-10.0-10.0.9-1.el10_2.x86_64_v2.rpm d8205aee6b6874d8f1aa3fbb6ff7e3da9ee7df7616869a0fab4173cf26603274
x86_64_v2 dotnet-sdk-10.0-10.0.109-1.el10_2.x86_64_v2.rpm d93b4a95308cea3d8ff49d5328f8ae77ce02aef1337acd9eb034bab70a058db4
x86_64_v2 dotnet-sdk-aot-10.0-10.0.109-1.el10_2.x86_64_v2.rpm f436db69878fc3c482dbfc9c005209542d4d52078b2f945350d22dd41b057a3c
x86_64_v2 dotnet-templates-10.0-10.0.109-1.el10_2.x86_64_v2.rpm fb1c2a9fdd1f9c3dbbb22e3c5105ca76caa529896542223356bb43940af02319
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.