[ALSA-2026:99053] Important: .NET 10.0 security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-11-12
Description:
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.115 Runtime version: 10.0.15 Security Fix(es): * dotnet8.0: dotnet11.0: dotnet9.0: dotnet10.0: ASP.NET Core Information Disclosure Vulnerability (CVE-2026-109476) * dotnet11.0: dotnet10.0: dotnet9.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-105544) * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: .NET Denial of Service Vulnerability (CVE-2026-109475) * dotnet9.0: dotnet11.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114146) * dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114147) * dotnet11.0: dotnet8.0: dotnet9.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-114149) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.115 and Runtime 10.0.15 (JIRA:RHEL-302519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.115-1.el8_10.aarch64.rpm 07630ab1db164ca83df907e180e7d134cd23f47c2c28eda3318d3a38abf7e6a3
aarch64 dotnet-sdk-aot-10.0-10.0.115-1.el8_10.aarch64.rpm 2f506bee075fd9bf2a1bba0dbe6904f3521e7071ad9e1e8ca2cbee8b78abcb4b
aarch64 dotnet-templates-10.0-10.0.115-1.el8_10.aarch64.rpm 5519684b658a56fc8e281c62cbfe5a96443732c03262860b8ce6028d3bb45d4e
aarch64 dotnet-runtime-dbg-10.0-10.0.15-1.el8_10.aarch64.rpm 5cffcd8631aac7a616e4d9721f2b77449f5142f2954c27db67ad2b99066bb1ef
aarch64 aspnetcore-runtime-dbg-10.0-10.0.15-1.el8_10.aarch64.rpm 874fb8a831622560cb3442a43f73e9b5123ef47b548376697e018a7943b5a76c
aarch64 dotnet-runtime-10.0-10.0.15-1.el8_10.aarch64.rpm 884799a284dc976903bc8686cae285e0c37897a3a63bfa9f569a72e43125aa8d
aarch64 dotnet-apphost-pack-10.0-10.0.15-1.el8_10.aarch64.rpm 97c5eb02ebc9f032078ac29b723aaaafeb7164ec819151084f0ce78d77473108
aarch64 dotnet-sdk-dbg-10.0-10.0.115-1.el8_10.aarch64.rpm 9e68d6dfb6a5effb89ac2f8dc6c7e2fc990b1d50ca06032e53c28d9b33d0f9a6
aarch64 dotnet-targeting-pack-10.0-10.0.15-1.el8_10.aarch64.rpm c04193520cb184a7988b9909c6ce6b6fc0c729f261c7a75c4a4d1d1b8616a2e1
aarch64 dotnet-sdk-10.0-10.0.115-1.el8_10.aarch64.rpm c45d1fd6f3410f02c46848b74667b5484afe9a95e97f4fbc8451eab8d07ffc61
aarch64 aspnetcore-runtime-10.0-10.0.15-1.el8_10.aarch64.rpm e383201dc2104ae7961e0f036024b6b1d1a3e660b70ce190cf96943524a3d9f2
aarch64 dotnet-hostfxr-10.0-10.0.15-1.el8_10.aarch64.rpm f19525eb9009e1fbf75e68c2fc99485c2f9a55fb74bcbbe2ccec060aaec38cc7
aarch64 aspnetcore-targeting-pack-10.0-10.0.15-1.el8_10.aarch64.rpm f24da0311b06f5fa602d59ba790c4cf5aa8dcc704b067b8f5bba279fccd7d6fb
ppc64le dotnet-templates-10.0-10.0.115-1.el8_10.ppc64le.rpm 156fd1587fb07d5ccd55d827eb1c2ae5de0f63d63217a15e7153a2d6f7cb4c0a
ppc64le dotnet-runtime-10.0-10.0.15-1.el8_10.ppc64le.rpm 19c4fdcf70f0567937614882369fa311838a64186b7efab7cd845f1f1aef58e2
ppc64le dotnet-targeting-pack-10.0-10.0.15-1.el8_10.ppc64le.rpm 2894ce381bbbb81a1b0422dcd4d8e4433a31d997d6ea96d2a85c4540caf85618
ppc64le aspnetcore-targeting-pack-10.0-10.0.15-1.el8_10.ppc64le.rpm 6b2f3e828eac8da2df88a9a17df4ebe366938681768588d9468d31aa176ae3b7
ppc64le dotnet-sdk-10.0-10.0.115-1.el8_10.ppc64le.rpm 72de40ea138a20e789031e3e35fd87faef79302b5632ccb72b65324c6341d930
ppc64le dotnet-runtime-dbg-10.0-10.0.15-1.el8_10.ppc64le.rpm a189c24b1876ee775c0feeedb1e0ea1bad5f67ebb900ab1d571f25e58c344324
ppc64le dotnet-apphost-pack-10.0-10.0.15-1.el8_10.ppc64le.rpm a3edf549d9e4b73f7cc3e45f3548727f1742fe6c2476a636d99a2068397fee6c
ppc64le dotnet-sdk-dbg-10.0-10.0.115-1.el8_10.ppc64le.rpm a752296a6a98fd59c5da91c893018f07a15f4dc114904039d6136ffb5741fd5f
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.115-1.el8_10.ppc64le.rpm ca0a063c08f5c0a5a5e35fc5e9646d9c5a4254d1832460b1aa922b41cb2a47e2
ppc64le dotnet-hostfxr-10.0-10.0.15-1.el8_10.ppc64le.rpm f37d06f1b2ad7d6c4200a9091997b951da02175ab917771998dd69a3cbd92f10
ppc64le aspnetcore-runtime-10.0-10.0.15-1.el8_10.ppc64le.rpm f7a49fcd525c01fd956c91c4e54d710b543b30ee20476a1ce310bf72500ec77f
ppc64le aspnetcore-runtime-dbg-10.0-10.0.15-1.el8_10.ppc64le.rpm f9198cbd11628087d3a4e2613b6cf53f0260e76d46143799ea5f6ea7a5bbdd69
s390x dotnet-sdk-10.0-10.0.115-1.el8_10.s390x.rpm 22ac185094a6bdec4cee608eb6c876420b317719373407ec14af2c2ca14d5010
s390x aspnetcore-targeting-pack-10.0-10.0.15-1.el8_10.s390x.rpm 292b20e2332ffd47e151408a0639926ae34dc9bc770d20e4c4a491e32786b743
s390x dotnet-templates-10.0-10.0.115-1.el8_10.s390x.rpm 5a2874f08e9e1666c283380586eeecd9ec9b89eef68c9c91d33e5e7b9c19094a
s390x dotnet-apphost-pack-10.0-10.0.15-1.el8_10.s390x.rpm 6ceb07ad48431803e5b8821b4807d793225dabd41df87c2bdf2803d2eb972f31
s390x aspnetcore-runtime-dbg-10.0-10.0.15-1.el8_10.s390x.rpm 7f45e6d7e5905bd4a9ed9444af7bd521dab0a5dd0e009e266baf3d66a841af18
s390x aspnetcore-runtime-10.0-10.0.15-1.el8_10.s390x.rpm 85add66b146eee85d5da58cde15f7a12f7d9433e12c8017c0e95412ec91413d6
s390x dotnet-runtime-dbg-10.0-10.0.15-1.el8_10.s390x.rpm a72fe492ad5608aa82ebea697450e5c392b191356f004b3e7a48b4482b271cd5
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.115-1.el8_10.s390x.rpm b6d0e8313e952ef4095025cd097a5762e0e838aff645a870fdd9b14350997a0c
s390x dotnet-runtime-10.0-10.0.15-1.el8_10.s390x.rpm c356186a4a0e6e7b2c4e6953421ce3a350a18107eed6154b8b027c516a6450ec
s390x dotnet-sdk-dbg-10.0-10.0.115-1.el8_10.s390x.rpm dbb35c6f9af45f05e86c3e7965c0e3c55b1d84ab60dfc03c283ac932fdc0ea22
s390x dotnet-hostfxr-10.0-10.0.15-1.el8_10.s390x.rpm e0c7b6d7e0b98bfc4cd4e6fdb43ba06c9a66ea2559127c1a370bfd8b775e0055
s390x dotnet-targeting-pack-10.0-10.0.15-1.el8_10.s390x.rpm f1b213aab83462d5a3ff245026e16373ce1ce229bf4258b0b5caa2b54130d51b
x86_64 dotnet-targeting-pack-10.0-10.0.15-1.el8_10.x86_64.rpm 11fa8c09b2049dc56fe2dbdd480f70361ea355e961a768e1208e7f58b01bf1e8
x86_64 dotnet-runtime-dbg-10.0-10.0.15-1.el8_10.x86_64.rpm 568ab67a19ed622600eab538a51bba76a0466ff209525bae731a7886f2106605
x86_64 dotnet-hostfxr-10.0-10.0.15-1.el8_10.x86_64.rpm 62c73149dcc0cc2af66474888f1018c0c8537e437e2222fb069b4871146db0b6
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.115-1.el8_10.x86_64.rpm 75fa4cf187a4bba38d6b7327689eea5e04507fe95057e057ec1b4893a088092e
x86_64 dotnet-sdk-10.0-10.0.115-1.el8_10.x86_64.rpm 798c9cba6f7be680425f38373bbb42e3807b37cc78f0820d93ba8a9ec3127d89
x86_64 aspnetcore-targeting-pack-10.0-10.0.15-1.el8_10.x86_64.rpm 7a296e82ac0b99b5c2f956eddebb0bd13a8f38fa33ea2a6764fd3b6bc23ccd72
x86_64 dotnet-sdk-aot-10.0-10.0.115-1.el8_10.x86_64.rpm 7e73a534b4cd9fb7eea71972d17f4c0cdc188e64b65956df12771e332219c0e2
x86_64 dotnet-runtime-10.0-10.0.15-1.el8_10.x86_64.rpm 8165127cbb19b7d9eebc9ac91f8883fd565bec8ad37ecc098c683f5ad3ed787d
x86_64 aspnetcore-runtime-10.0-10.0.15-1.el8_10.x86_64.rpm a9255dfc1ed9e1bae7c843834270bb8bd3b953c056a11a73bc8bade5c5705ae7
x86_64 dotnet-sdk-dbg-10.0-10.0.115-1.el8_10.x86_64.rpm b49309ccd7b40e645f490d5b8440641a08ec961d00715468458a3a043507fcc5
x86_64 aspnetcore-runtime-dbg-10.0-10.0.15-1.el8_10.x86_64.rpm bf5d138ca88642c5caf6a9db7f5871ad10a6723ea8354905d5f3b2cf6fa0cd59
x86_64 dotnet-apphost-pack-10.0-10.0.15-1.el8_10.x86_64.rpm dda9db63cdff2b4d72ed6c388d39064df33fdf6bf6b7807c153558aff09ffff9
x86_64 dotnet-templates-10.0-10.0.115-1.el8_10.x86_64.rpm f9eeff8a53a67a2561ca629ad848a2f5521a5e6882258eb8d731baae2ddb016f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.