[ALSA-2026:4458] Important: .NET 10.0 security update
Type:
security
Severity:
important
Release date:
2026-03-13
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 aspnetcore-runtime-10.0-10.0.4-1.el8_10.aarch64.rpm 123cfddb67a411cac87aec5a06b47371363a19bd62270a56fad894d8f0f5ade2
aarch64 dotnet-targeting-pack-10.0-10.0.4-1.el8_10.aarch64.rpm 1aa1da5a5c9250aa6ea5b61db73466a95b140fdf4447ccf485260927484dbc34
aarch64 aspnetcore-runtime-dbg-10.0-10.0.4-1.el8_10.aarch64.rpm 1cd50feb28ff7ff629ab34b2415ae1b26f162541203858b37d3c5302fb9897b2
aarch64 aspnetcore-targeting-pack-10.0-10.0.4-1.el8_10.aarch64.rpm 38e6b9d8a95e501e271b806da8e864037e6cd3d60ac1659cde9d90b4467936bb
aarch64 dotnet-runtime-dbg-10.0-10.0.4-1.el8_10.aarch64.rpm 3e1e855910157c3949621f601df2a95cd94b734d53a32b9d034fb6c55358ee4e
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el8_10.aarch64.rpm 49dd8356ed0bbc27492dbb73ab2fea301c4afc8a7626adf72aaf5f743b802cec
aarch64 dotnet-host-10.0.4-1.el8_10.aarch64.rpm 4d29f76b762889d974633285966110537ff426abfd54288a79ccd6d4f0914d48
aarch64 dotnet-sdk-10.0-10.0.104-1.el8_10.aarch64.rpm 62cbe2571379056a2a9c5a6eb1ff87f6312a97ae4157d3646531b3d640b9c894
aarch64 dotnet-hostfxr-10.0-10.0.4-1.el8_10.aarch64.rpm 768ab0bafa69d859dced97045530bf4d646c22d689fdf699c5ca92d7ddfafeb9
aarch64 dotnet-templates-10.0-10.0.104-1.el8_10.aarch64.rpm 9fd9ed6e50b8e70486a75f2534789a7628a186f7d070d7f6c74c76119dd28a9e
aarch64 dotnet-sdk-dbg-10.0-10.0.104-1.el8_10.aarch64.rpm a126ed6cd887c0d6cfc96c15069e02f28a3e14c74854dfc44769f7bb7221c79b
aarch64 dotnet-sdk-aot-10.0-10.0.104-1.el8_10.aarch64.rpm a631be4e36a996fdcc22e172dcf9522ae4e927b907a385c04668f225eac69889
aarch64 dotnet-runtime-10.0-10.0.4-1.el8_10.aarch64.rpm daa23c83c3350ecef7d2178814fd04fb46b3934531be64cb76468dbd2453094b
aarch64 dotnet-apphost-pack-10.0-10.0.4-1.el8_10.aarch64.rpm e922828e57cb63b6d54a30ab8187f74df6ac51c25e344c6812c8cfc110b86451
aarch64 dotnet-10.0.104-1.el8_10.aarch64.rpm f16520f0490309eac911f36ac67a9a2e51c7b786dc55b063adf5a0ef37cfffc6
ppc64le aspnetcore-targeting-pack-10.0-10.0.4-1.el8_10.ppc64le.rpm 0114c5a307767dc847a150082b8b6b37c119d958d8f18b7e66a272b3b75a0081
ppc64le dotnet-apphost-pack-10.0-10.0.4-1.el8_10.ppc64le.rpm 11726d3763ef9f6465fc3e5ba7166ccd5a6d1bbe2593fc25e1ed7b0b60be7b4f
ppc64le dotnet-runtime-dbg-10.0-10.0.4-1.el8_10.ppc64le.rpm 122553f1300390f7bc51f8088bee62607144edca1c65310d475e26f2fc78d5e4
ppc64le dotnet-runtime-10.0-10.0.4-1.el8_10.ppc64le.rpm 260be245e292e8a3e5e6bb62cc2da182243cad12e909271ca4e5cf6814fc57a8
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el8_10.ppc64le.rpm 2708ebb7ce4d68e5d46a9c5318368501eec42ec2bef0d64ad909a908c2c78190
ppc64le aspnetcore-runtime-10.0-10.0.4-1.el8_10.ppc64le.rpm 38c7b646e4755e94cb03f85d89e9be8bb2cfd0563f0ef8409ac5ef0afdafca37
ppc64le dotnet-sdk-10.0-10.0.104-1.el8_10.ppc64le.rpm 469e43f670b43e91bcc6a5705c6b3a1924dd7a0cf6dc8170ce459511bd74aff0
ppc64le dotnet-10.0.104-1.el8_10.ppc64le.rpm 55256882e0745f2a94ea47c06de3a37ffb7e9dda107b9ad2b29421882e144235
ppc64le dotnet-hostfxr-10.0-10.0.4-1.el8_10.ppc64le.rpm 9f7c8573875dc9454b13fb06541d43386ee44d80de93c36c6f3092ffee081c22
ppc64le dotnet-targeting-pack-10.0-10.0.4-1.el8_10.ppc64le.rpm ad33eec57f2f3269a985614c68fcd1ffaa0f13a2b2155520f64cfa78ce7a84d9
ppc64le aspnetcore-runtime-dbg-10.0-10.0.4-1.el8_10.ppc64le.rpm ae4a9e1309fd808ff86e869dbc32e3609f56d20f0409cde242986c3debe0ea37
ppc64le dotnet-host-10.0.4-1.el8_10.ppc64le.rpm b3c991b086466088dd1512ebf6afa0fba85208bd7d52aa146085c7a05d0ed22e
ppc64le dotnet-templates-10.0-10.0.104-1.el8_10.ppc64le.rpm c6bf3fd1e440d11ae7aec1b31d9f3c32f91897a84d2f3716f82aee838b042ce1
ppc64le dotnet-sdk-dbg-10.0-10.0.104-1.el8_10.ppc64le.rpm de6748e6e55382175ca2b058987be1f4a29060edb86393ff20b8c8e1f241c5f2
s390x dotnet-hostfxr-10.0-10.0.4-1.el8_10.s390x.rpm 0a8322e33be13125570c0eeac1eaa5642a23c89c6cbed14e36fda3df28d8adf4
s390x dotnet-templates-10.0-10.0.104-1.el8_10.s390x.rpm 12ea74cc6258dd6d375b2a4ff9e5c6b7adbb43774e17b95b282a4d24a3d1a4e2
s390x dotnet-host-10.0.4-1.el8_10.s390x.rpm 399284049759a1559aa948953e11ea8895ed42c9fdc77d5b47e1a6657c76660a
s390x dotnet-sdk-dbg-10.0-10.0.104-1.el8_10.s390x.rpm 58e1015de1c5795bbae67688f66946c37309d8c02bf108bcd4d592b344ca1939
s390x dotnet-sdk-10.0-10.0.104-1.el8_10.s390x.rpm 5b003ae265c7d72c1f8de794cc1ee88de7a015253e796f06fb0ede1fff861344
s390x aspnetcore-runtime-10.0-10.0.4-1.el8_10.s390x.rpm 8991b115394f2906fc85cb955b637beac1ad0242b595ec3a66322bdf15ac9b26
s390x dotnet-runtime-dbg-10.0-10.0.4-1.el8_10.s390x.rpm 91ad940bfaba3b2efd4a7c3b21fe2b44038650388dcb2a46836d9bb1ec3c0ba1
s390x aspnetcore-runtime-dbg-10.0-10.0.4-1.el8_10.s390x.rpm a599f2204af6946ef278f7f6b0999e03ebf3de8a90ed63a762ecc43b7b4d1376
s390x aspnetcore-targeting-pack-10.0-10.0.4-1.el8_10.s390x.rpm b46a307d53b453999f38a0c6ffe27b2658b0832f5261db0b5a9b565c1440417e
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el8_10.s390x.rpm c139774d4b66ab0f9cc3b5bbd5c9b7889a2f9439a5c92c00938381b909b922ff
s390x dotnet-apphost-pack-10.0-10.0.4-1.el8_10.s390x.rpm c817853aa6c3077f7323010224d03689b87fc914e8c17c0059288d3ff8a4473f
s390x dotnet-targeting-pack-10.0-10.0.4-1.el8_10.s390x.rpm ce44f95dbe3bfa9ecc58fe9d7435c11d984b393a2c79dfe69e763e3a0c1c81ab
s390x dotnet-10.0.104-1.el8_10.s390x.rpm cfdb0cd62bc177f6cb670034e0b4054ab58716403c1c04551bb8c5b3cfb6d6a0
s390x dotnet-runtime-10.0-10.0.4-1.el8_10.s390x.rpm eabd434e387a8294714be9528e9e2ea39efb81fab5c9aa3a0a7afaee791b0030
x86_64 dotnet-sdk-aot-10.0-10.0.104-1.el8_10.x86_64.rpm 003fe3ff9d9a8d318979dc1a30f6cbe59c3a185ac6beb6f579c3731301fe055e
x86_64 dotnet-runtime-10.0-10.0.4-1.el8_10.x86_64.rpm 086985313db8d11c96f10339a0efe76f29691743ef3e6749b20e9d05b2de7d7a
x86_64 aspnetcore-targeting-pack-10.0-10.0.4-1.el8_10.x86_64.rpm 0afc233dedf87452d251a2f1668aa66be4c8747d3c26133094727a599be2a090
x86_64 dotnet-apphost-pack-10.0-10.0.4-1.el8_10.x86_64.rpm 197e872514daed54aa5b6780d3837f094f6e4e8305f3ed112eba695294cd9819
x86_64 aspnetcore-runtime-10.0-10.0.4-1.el8_10.x86_64.rpm 3fe2f42f24e596bb7b4606011886f9268a642973c51fa0877caecef2658a8394
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el8_10.x86_64.rpm 514618108b70befa6cb5aa498e514de559420e601c96e70426e9200105a014ab
x86_64 aspnetcore-runtime-dbg-10.0-10.0.4-1.el8_10.x86_64.rpm 5cafdcbbb6f2d24ad93050338e8add293c46d4e335f55aeaea74fff8fde902a0
x86_64 dotnet-hostfxr-10.0-10.0.4-1.el8_10.x86_64.rpm 9c6de36b656db6e02ac2e9cb04d9c2761890d07573ddce519a2fa80b0bec01f9
x86_64 dotnet-targeting-pack-10.0-10.0.4-1.el8_10.x86_64.rpm a1bf842c7e0191afd0be0ae99a255ade0b0cfc2e76fc8bf5d24178b0cd1619dc
x86_64 dotnet-host-10.0.4-1.el8_10.x86_64.rpm adf3b9abbbb281809563376a7273ffc87dbde85b13a181ab8421edd18346a3bb
x86_64 dotnet-sdk-10.0-10.0.104-1.el8_10.x86_64.rpm b6d71e6dc9726e882e2672773600d4457f95c1701bb72c235e728b211432df61
x86_64 dotnet-runtime-dbg-10.0-10.0.4-1.el8_10.x86_64.rpm ccc88a01c6f7a01496a0969cdbfb947d76e4b0cf7f2a4369b96a7a0ed825862b
x86_64 dotnet-10.0.104-1.el8_10.x86_64.rpm ce2ae84d0c6a1aafc0163bae0b58a0edb10d0c9d8bf8fa850b445cb1baafb5bf
x86_64 dotnet-templates-10.0-10.0.104-1.el8_10.x86_64.rpm d1683ce62b0dace0aaf062b18696a93ccb8e8de40c0cfb9ff842629287d9ebf7
x86_64 dotnet-sdk-dbg-10.0-10.0.104-1.el8_10.x86_64.rpm d8ed2b021eaafba8e10af508aff34a3bb307810b623b166a78c8c20f4115976c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.