[ALSA-2026:25222] Important: .NET 10.0 security update
Type:
security
Severity:
important
Release date:
2026-06-12
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es): * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-sdk-dbg-10.0-10.0.109-1.el9_8.aarch64.rpm 1038a6dfc3a2a3066a492de319d81dcae8a112bb973a901117f1034ba41ad05c
aarch64 dotnet-sdk-10.0-10.0.109-1.el9_8.aarch64.rpm 1207eb3359876e8f1d4a473c21d156a0ffaee8289f4b462e6bf6974bcf2b20d8
aarch64 dotnet-apphost-pack-10.0-10.0.9-1.el9_8.aarch64.rpm 220e931dd136eb0005588fbfe354279560e6a2dbf132bd49e94748a78ddae89f
aarch64 dotnet-hostfxr-10.0-10.0.9-1.el9_8.aarch64.rpm 34a831ce6e35c79ea29e379d5938df2055f0a50accb46e068ace3d0e1a9eae0e
aarch64 dotnet-sdk-aot-10.0-10.0.109-1.el9_8.aarch64.rpm 34b114bd7533fd3e8d797882e3b824b820ac43b677bbce215f531d22b34f6069
aarch64 dotnet-runtime-dbg-10.0-10.0.9-1.el9_8.aarch64.rpm 68233e12eb896e6eee4317c5f868af4f63bb927430a228b63b7cc1f89b683370
aarch64 dotnet-host-10.0.9-1.el9_8.aarch64.rpm 6b26ce95e0b5998cb08e2d40c03710970a991132e03d228070c3d6514e6cfed0
aarch64 dotnet-templates-10.0-10.0.109-1.el9_8.aarch64.rpm 9359a40a5d97ef59ee02b09ac12b22636f33db1f1eedfec3c680417b46229d88
aarch64 dotnet-targeting-pack-10.0-10.0.9-1.el9_8.aarch64.rpm 9beed0a1669c914fba942835b4e00ef887ed3001155c967ca29219a48286093f
aarch64 dotnet-runtime-10.0-10.0.9-1.el9_8.aarch64.rpm ae8ad57d20ec5ee32f1bc4bfc979428a4666d4ad7af4e0f631c43edd97963b00
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el9_8.aarch64.rpm b4c49122cb6f180dbb73a431192dd67d89e319ea867b7c899176d7206a349cea
aarch64 aspnetcore-runtime-10.0-10.0.9-1.el9_8.aarch64.rpm cdbecf8b32e9ed293b6fba33cd47fd44812e07bc10c9e7d37173ed8cf6a61dab
aarch64 aspnetcore-targeting-pack-10.0-10.0.9-1.el9_8.aarch64.rpm eaa2b5eae0460737417185935ddd7760a3d178500e827e5ddfd44858ccc5bc51
aarch64 aspnetcore-runtime-dbg-10.0-10.0.9-1.el9_8.aarch64.rpm fe505c7f54709f9a6fece9e8e2f6a92970b0c171b8d7189f9fbc00dcd7dc16ec
ppc64le aspnetcore-targeting-pack-10.0-10.0.9-1.el9_8.ppc64le.rpm 3be3680f22feb43af0b1d8fca08aaddd10d16252b2b2f646803496fa3c3256ca
ppc64le dotnet-templates-10.0-10.0.109-1.el9_8.ppc64le.rpm 3f1e332b139cf62737ed90cedf42d80bc366e83ec71b9295b51a2fe100ad4e0c
ppc64le dotnet-runtime-dbg-10.0-10.0.9-1.el9_8.ppc64le.rpm 3fa5db44a75cb7d52373a7f491828d7b1d44cd707c71afb80131502f850b1736
ppc64le aspnetcore-runtime-dbg-10.0-10.0.9-1.el9_8.ppc64le.rpm 43be35f4a902afded65cfbdbaca7e65b21adda44a56861119a679a80480b689f
ppc64le dotnet-apphost-pack-10.0-10.0.9-1.el9_8.ppc64le.rpm 48a1941a69026b551686187918ad541be62b7227a6cc97b68351d98d8e639c33
ppc64le dotnet-runtime-10.0-10.0.9-1.el9_8.ppc64le.rpm 5020c425ed20b4b18d6e6019000cc8de46db2b48bfaa70fe59ae0b7e3280a354
ppc64le dotnet-host-10.0.9-1.el9_8.ppc64le.rpm 6f02a492f6e2dca2e9d8540aeb78ba314d56ef2ee9c8babf3e2e928b7c479d64
ppc64le dotnet-sdk-dbg-10.0-10.0.109-1.el9_8.ppc64le.rpm 6ff7b7450051724c008d41b3f8d5bc9894b0c91476bcc8c3a003a1471882c5a2
ppc64le dotnet-hostfxr-10.0-10.0.9-1.el9_8.ppc64le.rpm 793edd0787c207b863ad100797dd9e0bad087ef0371f39608f4880e1fd95dbef
ppc64le dotnet-sdk-10.0-10.0.109-1.el9_8.ppc64le.rpm 91c7d288baa93ba2c8a0f700728728b85e0812d9678e6fb3d49b17a1908ff771
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el9_8.ppc64le.rpm 94ee195071e8ccdbc884b6b4c1d2b5c07919aa6d2eb52da03102ca2fe82bd1a5
ppc64le dotnet-targeting-pack-10.0-10.0.9-1.el9_8.ppc64le.rpm dff6552843af133ff547826f89c26f5145c4d714702309095fee076749f5d13b
ppc64le aspnetcore-runtime-10.0-10.0.9-1.el9_8.ppc64le.rpm f8e1c67807666dca3f5acb91e4caeedeb651468a6176fd7ad56c2456787d5053
s390x dotnet-runtime-10.0-10.0.9-1.el9_8.s390x.rpm 198f0f2f1da5769cdfcf6a4592b6b4b381360c30f028ea0a90cb3910af543989
s390x dotnet-runtime-dbg-10.0-10.0.9-1.el9_8.s390x.rpm 1d66f16d86b8eff660cb93e73c159fbe37c8e6d4bacf403019870970e9431b93
s390x aspnetcore-runtime-dbg-10.0-10.0.9-1.el9_8.s390x.rpm 2de53a09f0b1795ebd81fda4748848065b73010a53d7df5a4cf00b7083e6a21e
s390x aspnetcore-runtime-10.0-10.0.9-1.el9_8.s390x.rpm 34e9dcdcff935f6f24ab1a1ee89789c177ad3fc125543ea0320f6d9017786f25
s390x aspnetcore-targeting-pack-10.0-10.0.9-1.el9_8.s390x.rpm 3ffd5c52ee9653a88dbb51c6317b5a4232abdf102dde09ca899063a8971bd1f0
s390x dotnet-host-10.0.9-1.el9_8.s390x.rpm 6cb73ab0b6744c69b0b6357d00f46c092c299395727b400c780e6c968b038f7a
s390x dotnet-apphost-pack-10.0-10.0.9-1.el9_8.s390x.rpm 937e8a0ee71d0cf7c606b66874950a241e1fe3d169586d1bfe03a2b8bb2ad98b
s390x dotnet-targeting-pack-10.0-10.0.9-1.el9_8.s390x.rpm 99e4ebaacb40d7c76793a35227aa2eda8de096d53ec5c619e556b95e30646e57
s390x dotnet-sdk-dbg-10.0-10.0.109-1.el9_8.s390x.rpm 9c13121266750ae77719eaa5417d4c7942b65f254fe1862f9506271cc290c9ae
s390x dotnet-hostfxr-10.0-10.0.9-1.el9_8.s390x.rpm a4e1e891111aa0beeb6b2fae1869967fa62dcba192dcbad501e69eba658be014
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el9_8.s390x.rpm a74393b8e1ae8a29a8941a153c3ba3f9a807d996b6fe3d681cc7238839ef98ba
s390x dotnet-sdk-10.0-10.0.109-1.el9_8.s390x.rpm c6c6bed2f3dfd97bc904e58f0c2a126866c0be2d3f64367df19f79d87bcfeb32
s390x dotnet-templates-10.0-10.0.109-1.el9_8.s390x.rpm ea55473f3c3ccfb0bc5a0f1568dfccaa5ea5bc1c65160f70955fbfe00fc828b9
x86_64 aspnetcore-runtime-dbg-10.0-10.0.9-1.el9_8.x86_64.rpm 0e971cbb602e867c8b7945f6c1eae965b3a47371c136402d6fe3a8e016246725
x86_64 dotnet-sdk-10.0-10.0.109-1.el9_8.x86_64.rpm 289e110580c7ec59f39b04ac0180e409ee62d913f4cfc47bf0b4297902ff9000
x86_64 dotnet-hostfxr-10.0-10.0.9-1.el9_8.x86_64.rpm 3641ab551ce4531133e2eb347e55dbd472c862756e37df0da66f16dd4c72ad30
x86_64 dotnet-targeting-pack-10.0-10.0.9-1.el9_8.x86_64.rpm 3aae2a7e4e2bdc502d38ab7cdebd6914e69e107dbe1099edf9a12d3ba003b7dd
x86_64 dotnet-apphost-pack-10.0-10.0.9-1.el9_8.x86_64.rpm 52a81c827459a5d26b47e5b118584b75a8ac01933998bd83962959c171dc5ae7
x86_64 dotnet-sdk-dbg-10.0-10.0.109-1.el9_8.x86_64.rpm 70ee76c0cc36d4489735e0430d7142cb8a537e35fce3a8f2ee2d943227fd1094
x86_64 dotnet-runtime-10.0-10.0.9-1.el9_8.x86_64.rpm 7e502e4fd532c42b1c8a8dd861243c66c47a9898903fd9c6a00333102f428056
x86_64 aspnetcore-runtime-10.0-10.0.9-1.el9_8.x86_64.rpm a1a42cd271be67eeb737432eb5cfd32a8ee2b6dad2e2585b3a594d19607f3f6c
x86_64 aspnetcore-targeting-pack-10.0-10.0.9-1.el9_8.x86_64.rpm a9331a7f1f3a2d53723141a8ff7a9be521e44fdcf28a9783a0f00b61d2ebbb83
x86_64 dotnet-runtime-dbg-10.0-10.0.9-1.el9_8.x86_64.rpm c169040e14ec24a607609b92eac6e3eb88c8896ca10fb1a0e16961ab26f81967
x86_64 dotnet-templates-10.0-10.0.109-1.el9_8.x86_64.rpm c767e8ebf42fc6d41bde3321cd5c33c90c0b75f1bb5d98dc54957680ae681955
x86_64 dotnet-sdk-aot-10.0-10.0.109-1.el9_8.x86_64.rpm d5d8bcb224676e2c74dc7a5c6ae4895565a304cdee964fa845bb36e0ce8f929e
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el9_8.x86_64.rpm eca40a932608391405a16fed68a0f97a5f75cdf48ce72c16b02dcef779e88a6e
x86_64 dotnet-host-10.0.9-1.el9_8.x86_64.rpm ef3d9437fb51460ff15b421cbbf2e0a3058719a502125183f16efc6de4a15149
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.