[ALSA-2026:41900] Important: .NET 10.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-07-31
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10. Security Fix(es): * dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM (CVE-2026-50651) * dotnet: .NET Core: Denial of Service via type confusion (CVE-2026-57108) * ASP.NET Core: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-56170) * ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm (CVE-2026-47300) * ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass (CVE-2026-47303) * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-47304) * dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation (CVE-2026-47302) * dotnet: .NET Framework: Privilege escalation via code injection (CVE-2026-50650) * dotnet: .NET: Security feature bypass due to incorrect authorization (CVE-2026-50528) * dotnet: .NET: Local code execution via deserialization of untrusted data (CVE-2026-50649) * dotnet: .NET: Local tampering via improper link resolution (CVE-2026-50526) * dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure (CVE-2026-50646) * dotnet: .NET: Denial of Service due to uncontrolled resource allocation (CVE-2026-50525) * dotnet: .NET Framework: Denial of Service via network-based buffer overflow (CVE-2026-50527) * dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation (CVE-2026-50648) * .NET: .NET: Network Spoofing Vulnerability (CVE-2026-50659) * dotnet: .NET Framework: Denial of Service via improper input validation (CVE-2026-50524) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.110 and Runtime 10.0.10 (JIRA:AlmaLinux-192459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-templates-10.0-10.0.110-1.el8_10.aarch64.rpm 288a7f35736dd9af75a23dd7e198718742af8a210f1ae61af5da2b6076be6686
aarch64 aspnetcore-runtime-10.0-10.0.10-1.el8_10.aarch64.rpm 3b401196a76b7623c8ca9d0f0857fb56a66b235a0e6bc8ff9f2f90c32d37e52d
aarch64 dotnet-apphost-pack-10.0-10.0.10-1.el8_10.aarch64.rpm 3fb9d6d9cb484d5a8de40d5f1b064ebfd0fbf04eced491323c2a887785d6439c
aarch64 aspnetcore-runtime-dbg-10.0-10.0.10-1.el8_10.aarch64.rpm 5b9d9bed1cdaa3a1457f87dd84115ae6ff1eb29d6cf0d7bca78cfdad0e6516d2
aarch64 dotnet-host-10.0.10-1.el8_10.aarch64.rpm 5c86afefc43e411a4d8624b1377cae77b1317d9294f8a3180a99837c700f75c0
aarch64 dotnet-runtime-dbg-10.0-10.0.10-1.el8_10.aarch64.rpm 613f089c23d204bf17b7c8c8176a204b3ad9e3621e875c9e543a5f16afa545ed
aarch64 dotnet-runtime-10.0-10.0.10-1.el8_10.aarch64.rpm 61d5d4f07ad3d593be3b6efb6d84538ffe7e4d2ce13627e2a209c4b683ce6002
aarch64 dotnet-10.0.110-1.el8_10.aarch64.rpm 62bbf7dc9e6db23abf218545618afa10ee06c1b7f45ec2f3275039ec9ae6a3b6
aarch64 dotnet-hostfxr-10.0-10.0.10-1.el8_10.aarch64.rpm 709da1beb6926dd045354d3cd28aa97332439b8bfd2ba0c363e8ea57843f79eb
aarch64 dotnet-sdk-10.0-10.0.110-1.el8_10.aarch64.rpm 805c60b354fa97b90deb3cd7235b35a82315b55230c5710cf60ed1bcc91ae175
aarch64 dotnet-sdk-dbg-10.0-10.0.110-1.el8_10.aarch64.rpm 892ab4a989efbf07272208d0a44481b5342bae97766435072fc2d4643bf936d5
aarch64 dotnet-sdk-aot-10.0-10.0.110-1.el8_10.aarch64.rpm a7a40f2c283db537c4192d3c0af658406e7763912b8f6376de926a667c5b1cdc
aarch64 aspnetcore-targeting-pack-10.0-10.0.10-1.el8_10.aarch64.rpm ac4437840f0496dc7d6b200645e53d2134f36e8e460936fcbf1542bd2018cfe2
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el8_10.aarch64.rpm da01c877a2fe39ff6360bac8de651c106515f568763f7de735fb51124bb24cf7
aarch64 dotnet-targeting-pack-10.0-10.0.10-1.el8_10.aarch64.rpm fb7aecac2813ed90c6938a858080271bd79e34238f774aa0da6a82b895d6cb62
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el8_10.ppc64le.rpm 5d74fbbb8814d8fb52ed71232031933de427ef904f6b6f83e2ac8ce1fa2f1847
ppc64le dotnet-sdk-dbg-10.0-10.0.110-1.el8_10.ppc64le.rpm 600fae91978af6d634591bf26cdd257e6a53d93e11d45ff2f95cc5960f8ce320
ppc64le dotnet-sdk-10.0-10.0.110-1.el8_10.ppc64le.rpm 6057d841eada326c3aae6ec68d991a71c2323475f9d271afd26b68a9b2a7f090
ppc64le dotnet-host-10.0.10-1.el8_10.ppc64le.rpm 633db4669836e72bd23f375eebe3a8b90587b50d3732d78b73f9ed7f5a7e33a0
ppc64le dotnet-hostfxr-10.0-10.0.10-1.el8_10.ppc64le.rpm 6abf2d5840be9db604c8612339159ca3da6635f0353c528a7dbd363fff0baaf7
ppc64le aspnetcore-runtime-dbg-10.0-10.0.10-1.el8_10.ppc64le.rpm 70e08d5c4df76ddca2a7e21d7462db70fbbd50080a9bbcf5c473f3bf2ae6ccd8
ppc64le dotnet-apphost-pack-10.0-10.0.10-1.el8_10.ppc64le.rpm 7e694dd65d316b73489be2f1d0bcfe5c41e5ff5553c66633cc1b192e14c9209b
ppc64le dotnet-runtime-10.0-10.0.10-1.el8_10.ppc64le.rpm 895f5c51f347bf0d4cf31d27fe6ed5b14606137067fcffabef95d51f17b8369f
ppc64le aspnetcore-targeting-pack-10.0-10.0.10-1.el8_10.ppc64le.rpm b0dbacd7f12ee24e39d3acd6de006b80b3cecbfa7f54c153cafd1b86c0877c98
ppc64le dotnet-runtime-dbg-10.0-10.0.10-1.el8_10.ppc64le.rpm b19dc892673bf5bec3ebce3abb9f494997209bea0152f54e504572cf70c8a239
ppc64le dotnet-templates-10.0-10.0.110-1.el8_10.ppc64le.rpm b4ea08069dd8bf68b679b2cfe1fc08df7fac0174fa17c26e70a2b9c1ac5b1977
ppc64le dotnet-targeting-pack-10.0-10.0.10-1.el8_10.ppc64le.rpm bb39dd147a1d950c7b489e233b4d8dcfb33c51694e970f7e26a8315ba90f0707
ppc64le aspnetcore-runtime-10.0-10.0.10-1.el8_10.ppc64le.rpm cb47e78bcc22bd87acf270df3bd6fe6045f63af7159635f598569c506383eab1
ppc64le dotnet-10.0.110-1.el8_10.ppc64le.rpm d578c7f0da9e28c83cc511c769ad74f77eac0d891d7c444ee543796703e28134
s390x dotnet-sdk-10.0-10.0.110-1.el8_10.s390x.rpm 099da8deb3097a2083b8372edc6045b6d62d584840f06359245e42439b54b035
s390x dotnet-10.0.110-1.el8_10.s390x.rpm 0fb52063c046354ddc25d6be5ff87e0f38042f22dd5be83de5177a8318e17eb9
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el8_10.s390x.rpm 3f9a3ba315796e646e2e4a6b343e00e01654fcea4dd0416a1bbfc8ce4f2708aa
s390x dotnet-runtime-10.0-10.0.10-1.el8_10.s390x.rpm 4e8cbe3f90405abc58990b73cbda15adc067b21f6a107b474e4d1abe7e0f0432
s390x aspnetcore-targeting-pack-10.0-10.0.10-1.el8_10.s390x.rpm 566d4eed869f7a34256cb33480c808b3dc9562cb46d5a2fc74596c060d2c6799
s390x aspnetcore-runtime-10.0-10.0.10-1.el8_10.s390x.rpm 580270fb4c526231b7b51c09fdb8421c86e2a95f6a71812d345de159fe1db664
s390x dotnet-apphost-pack-10.0-10.0.10-1.el8_10.s390x.rpm 5c4885981857e4963aaf25c0595c81fde8f1f3212eaa3e51a375d69424ea2c80
s390x dotnet-templates-10.0-10.0.110-1.el8_10.s390x.rpm 737ba659de934d50274fefe06cf089de81cfce4c2c89f1dbda0fd8e572e9a42a
s390x dotnet-hostfxr-10.0-10.0.10-1.el8_10.s390x.rpm 979f60d82c7e4991a8bef2fabe873e7a41974842d6ec303523dae46b8de5716d
s390x dotnet-sdk-dbg-10.0-10.0.110-1.el8_10.s390x.rpm ab5502057782c46362d8e8d72e0ce49d389af8d977d1553b690cfb70c67f7ba3
s390x dotnet-targeting-pack-10.0-10.0.10-1.el8_10.s390x.rpm ae3cbdbc8757f40434d25d9884f9cf2dc8d7e5058aee01c5cb118f62f2d587d5
s390x aspnetcore-runtime-dbg-10.0-10.0.10-1.el8_10.s390x.rpm c15fb1915792013f9d258cbb371ce6bf01be08ed99e6be75d3efa3d8466ec828
s390x dotnet-host-10.0.10-1.el8_10.s390x.rpm f1a0e5252d0745f2290c8acb075cad7e936eced564646ea860aa993e3469db9e
s390x dotnet-runtime-dbg-10.0-10.0.10-1.el8_10.s390x.rpm f38a08629b76b8b732d81d4c742f45973dd1a921212c552b1e2d48dd16352892
x86_64 dotnet-targeting-pack-10.0-10.0.10-1.el8_10.x86_64.rpm 0a1d15987eb979b6be40247d7744b4013d8b94b2ab2eac07752f8b1298617fb8
x86_64 dotnet-apphost-pack-10.0-10.0.10-1.el8_10.x86_64.rpm 0a4b909aa87b22ca5bb71a0f93e77b25967943e3b58590e9d59694c97aff0cd7
x86_64 dotnet-runtime-dbg-10.0-10.0.10-1.el8_10.x86_64.rpm 0de7b23bf105cc2937cff488b4f7211d482f53ec2fe050870140e81b01952d47
x86_64 aspnetcore-runtime-dbg-10.0-10.0.10-1.el8_10.x86_64.rpm 156abb721f2399cde99bb2abe24eba2b192d3817c51100a7244cc48f4da3d992
x86_64 dotnet-templates-10.0-10.0.110-1.el8_10.x86_64.rpm 2a94b6fdadb9def83034b7df451ed25664df1c3781063127bd74f30e3d4b9211
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el8_10.x86_64.rpm 3fad00f231cf9dfacbc09761e15b7f23dbf60a4f5e51c81b08f177632a29bc37
x86_64 dotnet-sdk-10.0-10.0.110-1.el8_10.x86_64.rpm 3fc012db967745da61437bff87e21b1ae9ff0319b828c887314bc48421fd50f9
x86_64 dotnet-10.0.110-1.el8_10.x86_64.rpm 53d78c365ebb48ce6eb67e5a47f9b9372e0abbd6f32873061ef159fe936cec33
x86_64 aspnetcore-runtime-10.0-10.0.10-1.el8_10.x86_64.rpm 5cf8fe6bc4f54b2595e7d605b894a0d74a1fe6a8f58f8cfa6d4620d894b8b47e
x86_64 dotnet-runtime-10.0-10.0.10-1.el8_10.x86_64.rpm 5f3a8843e6f6e94dbc79b26dd29f236e37601ad5191e7362213d84ffcd521f7a
x86_64 aspnetcore-targeting-pack-10.0-10.0.10-1.el8_10.x86_64.rpm 7844e48a6394d18c5f719e82e01c0bea8eb3d90a291bbe4026945d4c9f64db77
x86_64 dotnet-host-10.0.10-1.el8_10.x86_64.rpm 9f033d323c653fdf8b10b42e2a3345d5bf25bae24bf18aed760cb1bfcc647029
x86_64 dotnet-hostfxr-10.0-10.0.10-1.el8_10.x86_64.rpm a2583b362f7dd729217f150a6ea3573515041a74649bd65aba8cfd53870338bc
x86_64 dotnet-sdk-dbg-10.0-10.0.110-1.el8_10.x86_64.rpm ae14bb002a42c2330151ffedf0d73917a69b902f245fdcd1a6a7b7cd74ad8d18
x86_64 dotnet-sdk-aot-10.0-10.0.110-1.el8_10.x86_64.rpm bffc5b7db42ede44e2c212736c1ac368f6e5dd13aa778b5b13ad599faa74dec7
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.