[ALSA-2026:41897] Important: .NET 10.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-07-31
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 [almalinux-10.2.z] (JIRA:AlmaLinux-192463) * dotnet10.0: Reduce time to detect hanging builds during .NET RPM builds (c10s) [almalinux-10.2.z] (JIRA:AlmaLinux-192326) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-apphost-pack-10.0-10.0.10-1.el10_2.aarch64.rpm 2df187383725e12d62c7536c17b585d148d3c5ce56e355847ca3f17cf9c572da
aarch64 aspnetcore-targeting-pack-10.0-10.0.10-1.el10_2.aarch64.rpm 369f08f14ec4a17a16dee99940ac4c426d9046ed67822ac526be3b6b75a926f7
aarch64 aspnetcore-runtime-10.0-10.0.10-1.el10_2.aarch64.rpm 40a1a4c6be11804d69556b69d4f1ba13257600450e20cb9e33a20b0a16d65e81
aarch64 dotnet-host-10.0.10-1.el10_2.aarch64.rpm 479491cd9ac82ad591f9e300fabef12ca05f31a16f37a6e9268c6df612531826
aarch64 dotnet-sdk-10.0-10.0.110-1.el10_2.aarch64.rpm 49506ed9ceecf8733b9aaabc496619ea57cf9e77a30c7167bbe3a936246ecdf2
aarch64 dotnet-runtime-dbg-10.0-10.0.10-1.el10_2.aarch64.rpm 59455f76caccbb2bbaa6706da10cf95bda9ab0a1cab9284b9cbb81ead5fb685a
aarch64 dotnet-templates-10.0-10.0.110-1.el10_2.aarch64.rpm 774f6192b900a8245992f56eebd76669c781b47a33d0243276e2fe02e74a040a
aarch64 dotnet-sdk-dbg-10.0-10.0.110-1.el10_2.aarch64.rpm 811c4cbaeef693b1271cd766af94b4dedf6d1736973a1091c9c9fc3b31fce085
aarch64 aspnetcore-runtime-dbg-10.0-10.0.10-1.el10_2.aarch64.rpm 92713a5506e7885ce3ca936bd02e05575a72571db831e1d00d05f76cd4b98946
aarch64 dotnet-targeting-pack-10.0-10.0.10-1.el10_2.aarch64.rpm a508b52054111ac42641160d38c3efe1df525cd63a3115897a1b5673e8c976f3
aarch64 dotnet-runtime-10.0-10.0.10-1.el10_2.aarch64.rpm bbd17619cb1ad6fbcb7c4d2e42b00a8cac8116a40a794a9fa0d0f3c751f5081b
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el10_2.aarch64.rpm cfe03487f0201c564dbf2fe29d8094039a98a5a13f00f0a9eaecb70f728e4c15
aarch64 dotnet-sdk-aot-10.0-10.0.110-1.el10_2.aarch64.rpm efcc56d302bbe425be245545135b0cc357f87f07828bffa42e305e6c07e9785a
aarch64 dotnet-hostfxr-10.0-10.0.10-1.el10_2.aarch64.rpm f80ff0458354014c8a5711572b3fb96c6294841f2f4122d1fd1c9dd5e66c8952
ppc64le dotnet-targeting-pack-10.0-10.0.10-1.el10_2.ppc64le.rpm 16fa6981cae576331d465c804d21acf02fe9c0a7817f0955026225da877f9a0b
ppc64le dotnet-sdk-10.0-10.0.110-1.el10_2.ppc64le.rpm 19722cc25cc13aa37d25c6dc1c4a77a08edc42d9310a7263c3f6779a572a06c1
ppc64le dotnet-templates-10.0-10.0.110-1.el10_2.ppc64le.rpm 27783f4a030c3b03fb13cc236435fbdd8dc265735db8226b208bb685adb0427a
ppc64le aspnetcore-runtime-10.0-10.0.10-1.el10_2.ppc64le.rpm 33b99ef8db15b5871d2c5a4a2931ff00fcdc82420db1feb4f228e4e305991403
ppc64le dotnet-runtime-10.0-10.0.10-1.el10_2.ppc64le.rpm 4b51ab72bfc30220208226eed0c172c30228be013690e2d79b2104014f7f3605
ppc64le dotnet-apphost-pack-10.0-10.0.10-1.el10_2.ppc64le.rpm 827d2eb957e3d9168bb924e8f783fc9a2f87668aa3504b4394f12d89dcde185a
ppc64le aspnetcore-targeting-pack-10.0-10.0.10-1.el10_2.ppc64le.rpm 9a891da9af1005dd123a1d7febf43166184ee12201e44f9e71c91b02c1b295af
ppc64le aspnetcore-runtime-dbg-10.0-10.0.10-1.el10_2.ppc64le.rpm a0eee78fb701af191c65a9bd17011b47882aed746f7c94a4a33a9772011e34ac
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el10_2.ppc64le.rpm aabeaa04f8877f31921bf4b3e38d8471b088c5e3ade72e90421b1366cd5b6a98
ppc64le dotnet-host-10.0.10-1.el10_2.ppc64le.rpm b5008d9eca21ed87bc392653561bb6eb0ab17e3d6c1ee4a8ff224b3dafe3633e
ppc64le dotnet-hostfxr-10.0-10.0.10-1.el10_2.ppc64le.rpm be925554fe6ea6e7ac58ee6f18ec3596c77d8587ea0279bd7b83be1c21720521
ppc64le dotnet-runtime-dbg-10.0-10.0.10-1.el10_2.ppc64le.rpm c267e875dd710875f27476481de4ac9879cabe6193efd615fd3923709f7995ee
ppc64le dotnet-sdk-dbg-10.0-10.0.110-1.el10_2.ppc64le.rpm f22b44dd7ace8d463d74ceff755d8649e3b63e698efd1d8c39a267c3aa7e14b9
s390x aspnetcore-targeting-pack-10.0-10.0.10-1.el10_2.s390x.rpm 14c1e15abe4130b97f8a4cf011f1b899e80426185a0d0baaa5de8918e761d4da
s390x dotnet-host-10.0.10-1.el10_2.s390x.rpm 2edf22b83ff9c8e310106a8964c744100892bebca77e8ebded39e04cbcee936d
s390x dotnet-templates-10.0-10.0.110-1.el10_2.s390x.rpm 328de186c57383ff33b4592d90c18012098f097c3ba1db58fe6b2207e55134ac
s390x dotnet-runtime-10.0-10.0.10-1.el10_2.s390x.rpm 57f7e0724eaa79526ed580af84143847e5d815123e7e469556bcb398d3caa462
s390x dotnet-apphost-pack-10.0-10.0.10-1.el10_2.s390x.rpm 5810bd5caf7d50ec959965fd1e74e7a7f7dcbaaf13b4a955f47c634ae009c064
s390x aspnetcore-runtime-dbg-10.0-10.0.10-1.el10_2.s390x.rpm 5a2d55b0fb4e1745df29b9739ac85a57722b17baa4bfddd864f1819d29e1a183
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el10_2.s390x.rpm 6f01491c7bba958505d65b2caf07329d1d7c8af3b8e27aa4c5e19be0f62cf0a9
s390x dotnet-targeting-pack-10.0-10.0.10-1.el10_2.s390x.rpm 7b5fde50e9962058a52a0536ded09d8a48fec0cab6afb8fa44b4c99f4b70719e
s390x aspnetcore-runtime-10.0-10.0.10-1.el10_2.s390x.rpm 9ef5751991443f2a66a8e201f4c4d8ef2fffc9d8e05a2fdfac8c82cca5cb66c4
s390x dotnet-runtime-dbg-10.0-10.0.10-1.el10_2.s390x.rpm a0f77d778f3912c016b8f6780870c72468f3b490816bab86661262d2e16cc598
s390x dotnet-sdk-dbg-10.0-10.0.110-1.el10_2.s390x.rpm c8f6dd811a4f6fd0c5bee92c917af76ee38de2ba9611caac13e54fc9ce3c4ea0
s390x dotnet-hostfxr-10.0-10.0.10-1.el10_2.s390x.rpm df0365432b42bab662e5671e6c95728e6abc5bb95b0268453a52b0cde3503a5b
s390x dotnet-sdk-10.0-10.0.110-1.el10_2.s390x.rpm e36d29ab50c5001f6d62526deff991504c54e99801591a01957939e32991b7fd
x86_64 dotnet-sdk-dbg-10.0-10.0.110-1.el10_2.x86_64.rpm 02ed8c02eb694d0b7c659ad114bb03d1d0e9fcf545d4a14cc436af68118e7a47
x86_64 dotnet-sdk-10.0-10.0.110-1.el10_2.x86_64.rpm 0845c31ea61905c1406e7cd70b59141dfdc598486b2697ece32beb53ace16277
x86_64 dotnet-runtime-dbg-10.0-10.0.10-1.el10_2.x86_64.rpm 098fabafb8a12188897c48fe997f70269601be534f9f3e897aca9439b2bfa4c4
x86_64 dotnet-templates-10.0-10.0.110-1.el10_2.x86_64.rpm 18fa279636229bdc2c632d8d2752355a93d4f4ecb70f7a7a260a32b070b2457d
x86_64 aspnetcore-targeting-pack-10.0-10.0.10-1.el10_2.x86_64.rpm 3c869d59d0f73073723077ba75eafd82cbb5b3f58124bfe9f6275a9c85380bd6
x86_64 dotnet-targeting-pack-10.0-10.0.10-1.el10_2.x86_64.rpm 4c73aa76d45fd4b6fd5a1b724b5491ff75264722eea3a1cc1a1d0be8d81fc8d7
x86_64 dotnet-host-10.0.10-1.el10_2.x86_64.rpm 4ed730b9c88eef690f0fb9ef897832cf01d9457321186d0ae25dfbc8c4270137
x86_64 aspnetcore-runtime-dbg-10.0-10.0.10-1.el10_2.x86_64.rpm 6da15a98a5b4044d459db8e5bcb2168cd8778d4ddde8dd3f5f2f09862722029d
x86_64 dotnet-runtime-10.0-10.0.10-1.el10_2.x86_64.rpm 7e6a0480932e6a0df2716eac48054fa4dec703319efe7839d4c08010a9df42f4
x86_64 dotnet-sdk-aot-10.0-10.0.110-1.el10_2.x86_64.rpm 7f6292afad58539e3060a848a6b05e6b1c5250cfaee939f2554a13f3d09c880d
x86_64 aspnetcore-runtime-10.0-10.0.10-1.el10_2.x86_64.rpm a6d3a388710915f41f10b9ccc5b7fb3457a63aec2c71decb1e30507105b5b2bb
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el10_2.x86_64.rpm b0da65fc48ea5fabada9838102191b3c1dcfa3aedac2cdc63ac729053287b151
x86_64 dotnet-apphost-pack-10.0-10.0.10-1.el10_2.x86_64.rpm da17cbb4d426446193431dcc55f454c5c44de090fe1dd51498fc166c3603f0b2
x86_64 dotnet-hostfxr-10.0-10.0.10-1.el10_2.x86_64.rpm dde53ae46419e06ed697cf24532bc62a32795c00d103c2c7d9f946df1c5a5173
x86_64_v2 aspnetcore-runtime-10.0-10.0.10-1.el10_2.x86_64_v2.rpm 0aa44f33b5d982ef8d3426041a3ad672b4f7ae9084382c1f9d0085980dd806f8
x86_64_v2 dotnet-sdk-dbg-10.0-10.0.110-1.el10_2.x86_64_v2.rpm 24b0536a21ce84ef290e3a92b6568bc8be107507b9951d4c3c1299ea0ff25c45
x86_64_v2 dotnet-host-10.0.10-1.el10_2.x86_64_v2.rpm 2a767f3d5d355afdd2aa61335722ad3776ce1906d8bbedfe4506b16b4ccd0056
x86_64_v2 dotnet-runtime-10.0-10.0.10-1.el10_2.x86_64_v2.rpm 616de4b2ee46ac6d6db412eb4ba4fa6361a9871d6411477ed3be6790a1137202
x86_64_v2 dotnet-templates-10.0-10.0.110-1.el10_2.x86_64_v2.rpm 7b5643491f52cb0406644afade54703299a3c2098aa727c7622b6e1d5532bf50
x86_64_v2 aspnetcore-runtime-dbg-10.0-10.0.10-1.el10_2.x86_64_v2.rpm ac8bb065cd2096f87b936e5051319f957031885cda0939639ccd8d04e857d1b4
x86_64_v2 aspnetcore-targeting-pack-10.0-10.0.10-1.el10_2.x86_64_v2.rpm b35f60d85c5507ac6863bfb417d4a8261c58c0477a20f44bec1a7bd11bf2db74
x86_64_v2 dotnet-hostfxr-10.0-10.0.10-1.el10_2.x86_64_v2.rpm c0e0c85fbd68c4cea8334d66bf381ef029b9f1f17f931e4a856fd82d15f8c7f7
x86_64_v2 dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el10_2.x86_64_v2.rpm cbe9157f6489c90c22bcd467f5cd313b2f623da5fbac796db884abcdfe8c8584
x86_64_v2 dotnet-targeting-pack-10.0-10.0.10-1.el10_2.x86_64_v2.rpm d27a61565baa69e7e058c8a16b3044257735d5a5010e074a511362a6b4fe4b47
x86_64_v2 dotnet-apphost-pack-10.0-10.0.10-1.el10_2.x86_64_v2.rpm ec17169d34ecac71e35e292ae8d372a749297c38d9bb11e0a20a0346529c0623
x86_64_v2 dotnet-sdk-aot-10.0-10.0.110-1.el10_2.x86_64_v2.rpm ee4a4263a79666102c1eed70746173088fa49c6964477697165d0420344f7eab
x86_64_v2 dotnet-sdk-10.0-10.0.110-1.el10_2.x86_64_v2.rpm f04d9325a27c286066c3ab3629a90d8bf40254fd465baecf5a9342e0ba476e2d
x86_64_v2 dotnet-runtime-dbg-10.0-10.0.10-1.el10_2.x86_64_v2.rpm f5eee323ce7c0ec778bfa60b7beba7ed54ab333aa6408bd3ab312ac2c67049d6
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.