[ALSA-2026:25114] Important: .NET 10.0 security update
Type:
security
Severity:
important
Release date:
2026-06-11
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.aarch64.rpm 03321abc6ed677170e1425b977de32be7feb3986efce4ba57b97f839e5af2650
aarch64 dotnet-hostfxr-10.0-10.0.9-1.el8_10.aarch64.rpm 062b664b0ef296f21b581bd0c29dca915bec7d5450f3cb2589d3ad51532584d8
aarch64 aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.aarch64.rpm 0ab50cb1f7d577d609f27717416f226d223f2ea165878a0c222648b2e873468b
aarch64 dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.aarch64.rpm 14a0382faa89253c347c461563016774926178d1baa931ea3265086acd44707a
aarch64 dotnet-sdk-aot-10.0-10.0.109-1.el8_10.aarch64.rpm 17a7aafb9e8e8d8b6a11f22b33448ae6c48494f0d8e27c0601fb7b9581e6531c
aarch64 dotnet-targeting-pack-10.0-10.0.9-1.el8_10.aarch64.rpm 2402b426cda6331d206eeb4ae2a1ff227c9d44ab5f22e1bb562200cd8eea4a4d
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el8_10.aarch64.rpm 29642de9dc80ef68b293ef6463d572957186703310b0f81d2a50571544f6e71f
aarch64 dotnet-10.0.109-1.el8_10.aarch64.rpm 33a71b604e21e5bde81ba8becd85429dd560e8aa06ee99b9bed3b70d9f9e991f
aarch64 dotnet-runtime-10.0-10.0.9-1.el8_10.aarch64.rpm 44c58de0384ff3780ee2aa1298014d85c9fd46f82e7aa8e69e77d21bbe5ce59c
aarch64 dotnet-host-10.0.9-1.el8_10.aarch64.rpm 583de3db53ba758f31d219c7c3e975746673226b6a542dddfd1b3d9577f85c7e
aarch64 aspnetcore-runtime-10.0-10.0.9-1.el8_10.aarch64.rpm 7e4892e6d92a03059770a8108a40ada708108f59d8ad62f392e5d618748d193d
aarch64 dotnet-templates-10.0-10.0.109-1.el8_10.aarch64.rpm 8fd761c3e6f3621aac489348271fb2132f45ceb0b10c276db993fe2387b1f7bf
aarch64 dotnet-sdk-10.0-10.0.109-1.el8_10.aarch64.rpm af3b538cb1c0115994167bad99c6f372d55edd749906c893b6abfc875e9b8820
aarch64 dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.aarch64.rpm b687467c2d08bf83c11af21c7770760bd95bc358b75f11a76a60fe09fad69818
aarch64 dotnet-apphost-pack-10.0-10.0.9-1.el8_10.aarch64.rpm c6151867902dbea7b572f65ef7db4c5792b96f7c6fdc8bbd17f9abdc0beece2e
ppc64le dotnet-10.0.109-1.el8_10.ppc64le.rpm 165e3adadc29c9d6b461723828e69320426e49715b0b5315478dbe764d879a07
ppc64le dotnet-sdk-10.0-10.0.109-1.el8_10.ppc64le.rpm 2e44f223cca569b0da684a138bb39107101828fd04cfc983ec8771793efc9329
ppc64le dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.ppc64le.rpm 3e9259e9c4f8f91683a9b6f9dc3d29dffd5a678c21d58952cf3dd382ba5201dd
ppc64le aspnetcore-runtime-10.0-10.0.9-1.el8_10.ppc64le.rpm 4ca94ed043ef4c752e245997052dc75046a5e0eb71a6389d86ce6a0d651f700b
ppc64le dotnet-host-10.0.9-1.el8_10.ppc64le.rpm 5528568b8615e6d76e36c266edd21c8a8cc6382e20488c3c1a629e9cc616ea58
ppc64le dotnet-targeting-pack-10.0-10.0.9-1.el8_10.ppc64le.rpm 60fc77f2e90a93b04e8ca7f261f647f11f46b270f46f94d39374b9bd7891cfeb
ppc64le dotnet-templates-10.0-10.0.109-1.el8_10.ppc64le.rpm 6edce072a17fe3b866aa74a03990c5b0f6c5e42201ebff5ce005e58c1c2f136f
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el8_10.ppc64le.rpm 72adf887eb490783d93c8cbffdbcea7a171f34ee32b1f7009567a83419c8a17d
ppc64le dotnet-runtime-10.0-10.0.9-1.el8_10.ppc64le.rpm c083c9b50d774817ce6e2fb89ac9c738063ee9f6443610805f998c06f5a7e3ca
ppc64le aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.ppc64le.rpm cf57263b3d36a66701a6d6ed54553593975108d7ff3e80a953fa950d4dc4ac70
ppc64le dotnet-hostfxr-10.0-10.0.9-1.el8_10.ppc64le.rpm d558d03a1b0a410676a50038ab180aa19d83dbc015b09c94564785961466cf6f
ppc64le dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.ppc64le.rpm ebebb3a94d6cb955dcfa6d712a29279e94d2bd7c2414bd6efd561f99c4844207
ppc64le aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.ppc64le.rpm f755385bd0d0376a7e9c8c2d1ae9ae2557dc71f7f23b3e9d9a13f665dd665165
ppc64le dotnet-apphost-pack-10.0-10.0.9-1.el8_10.ppc64le.rpm f921486af0b01ff5b011bf2dec4322175b713e3d6ff226caa8ba7795f111c96e
s390x aspnetcore-runtime-10.0-10.0.9-1.el8_10.s390x.rpm 2ebceda4043c8a95e5a0bdbf5d428058eb957ede74f73784b288f3026ee06627
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el8_10.s390x.rpm 3436252cdccc2abd0aec49bd6012bb587286518a159c878bb3aafc8feb6395c3
s390x dotnet-10.0.109-1.el8_10.s390x.rpm 7021ff5a0d4767bc5cd4125c16a91c61f03c0344ff729e8e56aa213a3a21578d
s390x dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.s390x.rpm 7836809e1b5a64f9395b5dcb2b8f6d9a608aff119c90531214fcb148c2a1bf19
s390x dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm 8022a1ad601afa6db6adf7bff9c7cf91a72fb632990b7792af3d6c4d190d1825
s390x dotnet-templates-10.0-10.0.109-1.el8_10.s390x.rpm 88922fa23d1babc411f93b9c522cde49e1bf6b450f33fd1ca37696562aff9137
s390x dotnet-runtime-10.0-10.0.9-1.el8_10.s390x.rpm 92558009b50fa9e7ff08aff94a4d49c8f9a27bdc661036fd88c3ab138d04b7fe
s390x dotnet-sdk-10.0-10.0.109-1.el8_10.s390x.rpm 9361218d3c5405285595aa5f74322a8843c4059f1b2c492c07359fbbfb303d22
s390x dotnet-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm a196aea9cf92d77efa0ddd8adc5db9c11739acdc30a1e128b888d223566182c9
s390x aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm a53302137e778d5cc47e941d0f0f16b16a2c2b8b944f74a1829158a585a54d88
s390x dotnet-host-10.0.9-1.el8_10.s390x.rpm df82ee8f3a9de0148110e600f9e3f32b04594d8799594f55681e13d5d31097f3
s390x dotnet-apphost-pack-10.0-10.0.9-1.el8_10.s390x.rpm e3507ecae1574d3fe0da6bb84a7b3314beabbf38cea699908a0a847e91400647
s390x aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm efb8bb308f37710fe0362fe55f5197feb2eb5d4c5a75edd582cb3170d9e3e15a
s390x dotnet-hostfxr-10.0-10.0.9-1.el8_10.s390x.rpm f71c6f2292d3f3185b92f478fa130d4e78e9d3e1c36a00c537d16ac83052bdf6
x86_64 dotnet-sdk-10.0-10.0.109-1.el8_10.x86_64.rpm 04c1c4d86007a7e60c9f9409cc790dff3578f06bc2e80c523d719f6c62381827
x86_64 dotnet-targeting-pack-10.0-10.0.9-1.el8_10.x86_64.rpm 0ec4db63daf4c3ebe52b4371ea81ef6d2dbf2a3742026792935e107ea1507919
x86_64 dotnet-sdk-aot-10.0-10.0.109-1.el8_10.x86_64.rpm 212fe3d231b8c76136ab62d4f7919f9ad5c54b2bf41f80855e4db47e4c952e4c
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el8_10.x86_64.rpm 31023041ec3f675c81e15f3bc09bfe636d97bb988970d24b6c2b2c55e20b1e4d
x86_64 aspnetcore-runtime-10.0-10.0.9-1.el8_10.x86_64.rpm 528c4be8f628c7295cba6a377214a955202558cea70fd76ac4a4414b3eff1437
x86_64 dotnet-hostfxr-10.0-10.0.9-1.el8_10.x86_64.rpm 5e2bcd98040ba1ccd85a217f76e46742b2aab5540609a5fe040ff7f5513ab42a
x86_64 dotnet-runtime-10.0-10.0.9-1.el8_10.x86_64.rpm 6abd2748dfd9aba34ab1a3547f206d2117467dcf5390d66cccd9fe658f92ed52
x86_64 dotnet-templates-10.0-10.0.109-1.el8_10.x86_64.rpm 7c1622b8f0daca1f2658ba77ef711cb09b27906f92216b4586f0abdb9271205c
x86_64 dotnet-apphost-pack-10.0-10.0.9-1.el8_10.x86_64.rpm 8ab339f708555a5112f6b0cf4817d61fe5e3e3b726930a673241efc20bfa1ee5
x86_64 aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.x86_64.rpm 8fe39b21f178bd4ab41b6e4c5040812ba59060036283a9c6e3456b0fbf541d9e
x86_64 aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.x86_64.rpm a618b075601684bcf30516eefc9670d31b381f4dc2b1628d13a7c25ac5aee7be
x86_64 dotnet-10.0.109-1.el8_10.x86_64.rpm aa8c77c4096224a1787238f7f9e36116c2bc790672f5e75a05aee7aa0349a942
x86_64 dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.x86_64.rpm b139fefa25d7b068cb9bacc0404622c61724947de88babb3ee4f9b606df87ce0
x86_64 dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.x86_64.rpm bd157e393584104797809e9761e50bee3ddf96702b1eca3bb180c34f840f7349
x86_64 dotnet-host-10.0.9-1.el8_10.x86_64.rpm e4e5fb1344099723e8077fc27caee1782a3e211e90518d8e5dd384bfda4aa251
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.