[ALSA-2026:8473] Important: .NET 10.0 security update
Type:
security
Severity:
important
Release date:
2026-04-20
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es): * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171) * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203) * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116) * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-targeting-pack-10.0-10.0.6-1.el8_10.aarch64.rpm 0577d937a5aedd888eb46e5d06dfafef0ab39fc93b4a31804597e37e49f8eb9f
aarch64 aspnetcore-targeting-pack-10.0-10.0.6-1.el8_10.aarch64.rpm 2b8b1dcbfdb467ecc7246b442ee4dbf8ce47116f8348fb87c2baa02ef50e6b81
aarch64 dotnet-host-10.0.6-1.el8_10.aarch64.rpm 32e2f11f1b8561c4b277a4fd83be9242f2ed048e51e863686182686fc738a042
aarch64 dotnet-10.0.106-1.el8_10.aarch64.rpm 3e61d00c0e5d93b88904da8b8bc084f985b8f28c1b49bd23f081d85ebb2c3ca0
aarch64 dotnet-apphost-pack-10.0-10.0.6-1.el8_10.aarch64.rpm 4bcc61ab100ddc9804964201dab2dd5c9f34a1b5ff5a68123e0f9ef6f610a0b2
aarch64 dotnet-templates-10.0-10.0.106-1.el8_10.aarch64.rpm 554b1fb12f9c9967636756f31e1757ed600476fea73dbfff018dee8eeceab871
aarch64 dotnet-sdk-dbg-10.0-10.0.106-1.el8_10.aarch64.rpm 6a508c3a2a2c0445106e807745b05b6a7acb0c1285d5faedcf2f54d6a1d763db
aarch64 dotnet-sdk-10.0-10.0.106-1.el8_10.aarch64.rpm 7e6599a55ac2a997d0fe59a82544f35fecacc058feb5ced9a3541fefca6ae62d
aarch64 dotnet-runtime-dbg-10.0-10.0.6-1.el8_10.aarch64.rpm 8df5918a3156de228c0ee071dc3d93b5e7425031bcefb3228582d1e749f8e0f5
aarch64 dotnet-hostfxr-10.0-10.0.6-1.el8_10.aarch64.rpm ab5ee14086e553388d43279f28e5abf27aa8b318448e7f2fd9e8d9abec36a73d
aarch64 dotnet-runtime-10.0-10.0.6-1.el8_10.aarch64.rpm ba201c0e9e92a6dd13e4df6411810228d591f189be38977c1b3b43023465b5f6
aarch64 aspnetcore-runtime-dbg-10.0-10.0.6-1.el8_10.aarch64.rpm c84e715eea13e2e775fec4ffa68856583c369fb3e21b825780d39f6967302f30
aarch64 dotnet-sdk-aot-10.0-10.0.106-1.el8_10.aarch64.rpm d50e23eb22421f9fe5ba6f734e98512fc14319abb92f0ecfd6e16833e66f846d
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10.aarch64.rpm ee2c4c22db5e00c324d160892e17bbdc6ec7dc5ec4e0b5b3d27070ace21fb777
aarch64 aspnetcore-runtime-10.0-10.0.6-1.el8_10.aarch64.rpm f76f3c3067785424c01fbf7433fb0d11baf88adbab4e4c4c2b94a20adf2c9584
ppc64le dotnet-hostfxr-10.0-10.0.6-1.el8_10.ppc64le.rpm 0e48ee674b5d8b43cc4489944aefd86540d36108f4fd9c34e4fd322af4044af1
ppc64le aspnetcore-runtime-10.0-10.0.6-1.el8_10.ppc64le.rpm 2f5ac74586f96e5431235428cfb02cbf5ffbd15b06abee5373719b4fa9b5f5aa
ppc64le dotnet-targeting-pack-10.0-10.0.6-1.el8_10.ppc64le.rpm 42efc18d34310371b7e1d4e589cc020740a5ad778895e2956ca3ee4f4c8e98a3
ppc64le dotnet-sdk-10.0-10.0.106-1.el8_10.ppc64le.rpm 75539daa66741c3a4fa043b89a326e65a8c6bcf7d6b044c547502c20252fff0a
ppc64le dotnet-templates-10.0-10.0.106-1.el8_10.ppc64le.rpm 7da7128fc617c820b79db52ec39ce58a9d4b7a0ff28062a31edb9858c4b37fc2
ppc64le dotnet-runtime-dbg-10.0-10.0.6-1.el8_10.ppc64le.rpm 827849f575a4b9122676e092205223e1282e135fcad25dfed42c5318f43739a6
ppc64le aspnetcore-runtime-dbg-10.0-10.0.6-1.el8_10.ppc64le.rpm 8a0ff7e37bef2478f704b1fef473019143ad749642f5388d372297bfacfee564
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10.ppc64le.rpm 9267e2aa0fe646c72231aaa2e17cc48c2cee7ef2806be54579bbc3ce1890072e
ppc64le dotnet-runtime-10.0-10.0.6-1.el8_10.ppc64le.rpm 98067484639481f5cb43392f360d4118308a760ab988e14df7a2891fad7e7665
ppc64le dotnet-10.0.106-1.el8_10.ppc64le.rpm c19fc5c98cc159b1a09bca004a0e8d7f5e993bf4b9174e413385b0c63161d69b
ppc64le aspnetcore-targeting-pack-10.0-10.0.6-1.el8_10.ppc64le.rpm dbb26327f2c9ca6801415ee04d1934e8c53e5ab548b4d3f17d784d177c4e9f83
ppc64le dotnet-host-10.0.6-1.el8_10.ppc64le.rpm f0f4d38910ed987e794a78e01d117d78be1035705d9ae5bb0b86aa64e98cda57
ppc64le dotnet-apphost-pack-10.0-10.0.6-1.el8_10.ppc64le.rpm fab2d7a20b3ab1e1a85820e7959aa2eee443665af5585fb01fb231a637055eb7
ppc64le dotnet-sdk-dbg-10.0-10.0.106-1.el8_10.ppc64le.rpm ff7a4daeb7a97187e8887a69d4f8a6b78ddd8171d99c33413ed736f5f846303f
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10.s390x.rpm 343bf14f4e4d6f6cb9eadf8391d0c3ea34a12de08909cea295100affbf958f8d
s390x dotnet-templates-10.0-10.0.106-1.el8_10.s390x.rpm 37e7d2f98c56c53db37cbe5433262fcd77da7953c709172bfabe2d69f7167b6e
s390x dotnet-runtime-10.0-10.0.6-1.el8_10.s390x.rpm 4cbf3b9131612a46be17b1dcf67062137735d58da7c719a80baa8d211e10bf92
s390x dotnet-targeting-pack-10.0-10.0.6-1.el8_10.s390x.rpm 574932acbfb57ec3529175f0f41f5c270157a9af3d2112534f7774704aa27a6e
s390x aspnetcore-runtime-10.0-10.0.6-1.el8_10.s390x.rpm 6feb5a22d9b5b289aec20cecda4ff0d2b751cf776b8863884179566a3b2ffbaf
s390x aspnetcore-runtime-dbg-10.0-10.0.6-1.el8_10.s390x.rpm 747971fff0d55742d85a725d7e64c1374c8d93ee37072d8162eb054df6792439
s390x dotnet-hostfxr-10.0-10.0.6-1.el8_10.s390x.rpm 76b20f26bfda261b2cb18db8a746019b0254886178fcdefeb69e785f8bdc4bb6
s390x dotnet-runtime-dbg-10.0-10.0.6-1.el8_10.s390x.rpm 8e67515aff0723c09318fa7a156087982a0dd1a08f3002828c92cbe37db08e2d
s390x dotnet-apphost-pack-10.0-10.0.6-1.el8_10.s390x.rpm 99f1efa292eeed565839798d426d2f0b1449e3185df9fdddc94f8bdb7d2d26bc
s390x aspnetcore-targeting-pack-10.0-10.0.6-1.el8_10.s390x.rpm 9f39652b06ebfc342f7ec833a0005c2b80f810ae3f949a98a341d40a616013a3
s390x dotnet-sdk-dbg-10.0-10.0.106-1.el8_10.s390x.rpm a1a31244c126e1d98520e225a11ed7bc6b0d4b727a21c62694faf6ae2aa853ac
s390x dotnet-host-10.0.6-1.el8_10.s390x.rpm a2db33a4f5638242e366780ed6755186bd134a8a1258b23fd87cb46d8b13b521
s390x dotnet-10.0.106-1.el8_10.s390x.rpm b17be6dd59a71da3e3b954a78e3fbddf84c32ece97af3264a251f6fef243b70d
s390x dotnet-sdk-10.0-10.0.106-1.el8_10.s390x.rpm deb5c00d7024219843a2d20ef29050a7d740501f16fe805a394e767dfebdcd83
x86_64 dotnet-host-10.0.6-1.el8_10.x86_64.rpm 03e79d1042cb55d62505b2e0c5393c33af02a8306382b5be4f7d99728bb644db
x86_64 aspnetcore-runtime-dbg-10.0-10.0.6-1.el8_10.x86_64.rpm 0ec1013c0b1fd537d341d1542f4e252ab819501d427c2787d0a37576503abd59
x86_64 dotnet-sdk-10.0-10.0.106-1.el8_10.x86_64.rpm 1c8b5d7b9877535137522be3baf6713f49014f5ac5e73c3e05a3d58ee7d76bd9
x86_64 dotnet-targeting-pack-10.0-10.0.6-1.el8_10.x86_64.rpm 1f96cedfa2cab93492e974c455b374ee5aa6f4635222fceb0a3a588eeed12242
x86_64 aspnetcore-targeting-pack-10.0-10.0.6-1.el8_10.x86_64.rpm 3380546bb6bef1b779c7931b2e71bf538a975a68d27bc61f1b9ccb92a33ff606
x86_64 dotnet-sdk-aot-10.0-10.0.106-1.el8_10.x86_64.rpm 37ce41246e3977882b7e033030323fbc14605438720231da87ee9254a99908cd
x86_64 dotnet-hostfxr-10.0-10.0.6-1.el8_10.x86_64.rpm 60fe318a92c963c35936f7e804e45ad89ec485503e7ffdbe7f6bc16f8575bcb1
x86_64 dotnet-sdk-dbg-10.0-10.0.106-1.el8_10.x86_64.rpm 625a1f6c9e2444930de670a119f95eb6ee8a191da45a51edd819608cb2136c34
x86_64 dotnet-templates-10.0-10.0.106-1.el8_10.x86_64.rpm 8ffcad338f1a26912a0467347eb87698d19fcbfa9f418ec9ace902d4e3881c93
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10.x86_64.rpm a0370b0cd0355f3072163f9a23ab608aef68700d9d02fe04a62cec57ead40410
x86_64 dotnet-runtime-10.0-10.0.6-1.el8_10.x86_64.rpm a171c0167d6efd43d04da25b0da7a60ff52aaebb11c5b5f89465713758852d19
x86_64 aspnetcore-runtime-10.0-10.0.6-1.el8_10.x86_64.rpm ad983d6aae7e3c938406fe1f0bfb2a952fca0ea48a8a526c6321aee568fe051f
x86_64 dotnet-10.0.106-1.el8_10.x86_64.rpm c09b80ea4662f65e234a97b14bb8506549a3ac0fc93ae60b2aeb53e562b02694
x86_64 dotnet-runtime-dbg-10.0-10.0.6-1.el8_10.x86_64.rpm c3845658846c2ff297a4b7fd536e04ea9e71b10b69299b2569d51cb21d81d3fa
x86_64 dotnet-apphost-pack-10.0-10.0.6-1.el8_10.x86_64.rpm e0b2b89cbff2c3a5bd1c97128cb1466ba859212ec20cc4937395b5e569525ed3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.