[ALSA-2026:4445] Important: .NET 10.0 security update
Type:
security
Severity:
important
Release date:
2026-03-16
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es): * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127) * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 dotnet-sdk-aot-10.0-10.0.104-1.el9_7.aarch64.rpm 0d310ae874ce0c321513ac077c47d0a27703d6dbca2b0cc19a84e88b67df05e2
aarch64 dotnet-sdk-dbg-10.0-10.0.104-1.el9_7.aarch64.rpm 130f599a9b6a176898b39bdea07106e38faa3235fed95e83b67b84903e580aa5
aarch64 aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7.aarch64.rpm 2a2cd2331f4a42a735432ac55543660f99a31da00aa54eeafbefe9bbe48ef2f1
aarch64 dotnet-templates-10.0-10.0.104-1.el9_7.aarch64.rpm 478722d53593a38a3b0c38c39b1802b9362d94bb951a09fc194570b019562ccb
aarch64 dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el9_7.aarch64.rpm 515f193fa489da8cf9a2719293f477337769f6f82f7a78f71c6f60cfa1771447
aarch64 dotnet-host-10.0.4-1.el9_7.aarch64.rpm 6cb48fedf415ce1b09343c42d589a1491a6aef26af786dc616aa802694377c66
aarch64 dotnet-runtime-dbg-10.0-10.0.4-1.el9_7.aarch64.rpm 79cd74aefd3da9073f2b934c187ccd5d879b016dbad6f3fa49ed88735c4ab921
aarch64 dotnet-sdk-10.0-10.0.104-1.el9_7.aarch64.rpm 81641929c2699ebcd12053242df205aa667a899710f53d589cf8a723fbeef79f
aarch64 dotnet-apphost-pack-10.0-10.0.4-1.el9_7.aarch64.rpm 8e5ed2fbb0fb9bfb647d2a50efaab955e922e56d2ec281fe5b781b29622dd272
aarch64 dotnet-runtime-10.0-10.0.4-1.el9_7.aarch64.rpm 93087f15a050f6d4923334905b0983a7e21d702d8be581b15c9ef01b75c67638
aarch64 dotnet-targeting-pack-10.0-10.0.4-1.el9_7.aarch64.rpm 97d25e3e72e5f41bea896bac9139d48bc85ab8afa49518fe972e44042d7b097e
aarch64 aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7.aarch64.rpm a00fe3386630cc4e49c97f96408feb08f00812c4e0b4714d9ae234b495fea12f
aarch64 aspnetcore-runtime-10.0-10.0.4-1.el9_7.aarch64.rpm d65073f874e6abd8aff3877b658f72361d43910e0003894e516dc1e86cbbab0d
aarch64 dotnet-hostfxr-10.0-10.0.4-1.el9_7.aarch64.rpm fbbeebf0d8103adfb03b7bba91da428402e2ca6f5cab99e61c45e70fe90b5416
ppc64le dotnet-sdk-dbg-10.0-10.0.104-1.el9_7.ppc64le.rpm 0369f05f3bbf4e83e14defa747f128df8616f62aa8ac72107ff76e7ce8c4c6b5
ppc64le dotnet-runtime-10.0-10.0.4-1.el9_7.ppc64le.rpm 0f0e61d4a1a4ab643afbe5e1ebe7ca701e8fe7003c9d02eca90d1a791480c6e4
ppc64le dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el9_7.ppc64le.rpm 20d873b279747c4b817eb61a5c9402f34185912c2eb28d452e8e41aac5899e40
ppc64le dotnet-apphost-pack-10.0-10.0.4-1.el9_7.ppc64le.rpm 22837b42cc547ba90a86a1f5cc3d838b3b10dd8bfd1488b907bbc8b70f162eb2
ppc64le aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7.ppc64le.rpm 30276037b18c119b9f992ab635b255d686dfa797151f30068546e1d905c25ac8
ppc64le dotnet-templates-10.0-10.0.104-1.el9_7.ppc64le.rpm 3ad2349f7a82632a74c903b7c67951e7ce929e949a34f249072dc1068da20dd5
ppc64le dotnet-hostfxr-10.0-10.0.4-1.el9_7.ppc64le.rpm 4e63650464cec5607a55e8638b1d44c17dee62c0cb732535a5d7c130664e9551
ppc64le dotnet-host-10.0.4-1.el9_7.ppc64le.rpm 4f7a754e5cf4d59abc1ac64fb592d6e8e1e72a1d826c9b2e0035fb358b38f648
ppc64le aspnetcore-runtime-10.0-10.0.4-1.el9_7.ppc64le.rpm ab8e0885437e9133683c5efbbce34c564e4919cd1f9920e7517500fbe2699d41
ppc64le dotnet-sdk-10.0-10.0.104-1.el9_7.ppc64le.rpm c9ff589eb58adb23e4710129344f14782b8dd7f508f3b98f1a7485a02e99cbf8
ppc64le aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7.ppc64le.rpm d18df57ed2859fde6ac2b785c27be5c8251b114c34627cce991dbe53c18a57a7
ppc64le dotnet-targeting-pack-10.0-10.0.4-1.el9_7.ppc64le.rpm d1e9512693af8aee2d032074c4b3cad2fb27bde5901c4888d8998fd488a49396
ppc64le dotnet-runtime-dbg-10.0-10.0.4-1.el9_7.ppc64le.rpm eed3bb7a8b6a83bfe02a49aa839be0393717bb99e282c8a46e26a84095c1c02f
s390x aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7.s390x.rpm 0372296a10b7042e14aa2dbebb9b14f4c8061512ddf19e3a3f9bccf79dcf5ede
s390x dotnet-templates-10.0-10.0.104-1.el9_7.s390x.rpm 09544ca69bc63dc75485649bd23e2cfc4687c1f801f39f9caced238d52b35fd3
s390x dotnet-targeting-pack-10.0-10.0.4-1.el9_7.s390x.rpm 122ccd814761b29f3e98014d5e2c32ce45af1cffac74b375cc9ae410df00d1a6
s390x dotnet-apphost-pack-10.0-10.0.4-1.el9_7.s390x.rpm 3205f9c5a281382c982cded72c5ffd758b7ec1f7feae57e88c53d25e775caccc
s390x dotnet-sdk-10.0-10.0.104-1.el9_7.s390x.rpm 42b64c6b5dc9de2dacc49e690850e48ac6493799352eacecc9971ced7a294356
s390x dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el9_7.s390x.rpm 43b03c75688f433c18b89804206f6810627925c79ce6b493c7a6099012778d56
s390x dotnet-runtime-dbg-10.0-10.0.4-1.el9_7.s390x.rpm 5162ebe368bbe91f5dcf2324a046182b293adc2626a5f0e2c1e2331e00eaad64
s390x dotnet-hostfxr-10.0-10.0.4-1.el9_7.s390x.rpm 6fa84dc52d4991da48475986e11bed0c9029406b3c53e335a33d9a3b3b880133
s390x aspnetcore-runtime-10.0-10.0.4-1.el9_7.s390x.rpm 7d0c6066022c7ff631c0174214ddf7c4f333f19092db8192aef035a6931008d5
s390x dotnet-runtime-10.0-10.0.4-1.el9_7.s390x.rpm d06204dc9e9f0d1ae9c1945700c61f90580627801c82a75fc20762c4cc85da83
s390x dotnet-sdk-dbg-10.0-10.0.104-1.el9_7.s390x.rpm de99b7aec9807244591ae0dd10c7c5d4a8defa7dd69c73b3983670b90e4b09ef
s390x dotnet-host-10.0.4-1.el9_7.s390x.rpm e224ad5c074db7c0e5df1b26e1aa9b91a6554b3b70812ad6f9747d94d832a6f0
s390x aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7.s390x.rpm e8c4340492c2b5a9f027afd16df580492db0f846d2ae303315829a76c02b2813
x86_64 dotnet-sdk-aot-10.0-10.0.104-1.el9_7.x86_64.rpm 092f7ddd9b6ad114bb4a5094a2c7b54aa38253a3607553a62cf05da1ca5d67d0
x86_64 dotnet-sdk-dbg-10.0-10.0.104-1.el9_7.x86_64.rpm 187e0f005c65215a10cdfb3d43ad08ad8f1556797903b9d4662ea9fb49477f17
x86_64 dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el9_7.x86_64.rpm 233d57e2e32252434c2f95ea64d3c119d65d81240566b3c8377e2337a03e617e
x86_64 dotnet-runtime-dbg-10.0-10.0.4-1.el9_7.x86_64.rpm 38a1289d7f1cfa1e0b9d68cf7523b5c2ed85b530d1768193ec7d7a758c60e091
x86_64 dotnet-sdk-10.0-10.0.104-1.el9_7.x86_64.rpm 5b528beb9b7b4f55ce05d6266d051c960012680dfb47cb886b823f1891b428b8
x86_64 aspnetcore-targeting-pack-10.0-10.0.4-1.el9_7.x86_64.rpm 85e7fe5aafbce36c5f09443048900da08d23e13c11139f4b7940ee1405cca165
x86_64 aspnetcore-runtime-dbg-10.0-10.0.4-1.el9_7.x86_64.rpm 8f82502caa145626f86ca323b68b03588d5059a2935fa57ae88e81293d9e3248
x86_64 dotnet-runtime-10.0-10.0.4-1.el9_7.x86_64.rpm 995413e1f31a0608cd980838a3045c825599d5b58c25cd4ed544e76c561eaca7
x86_64 dotnet-host-10.0.4-1.el9_7.x86_64.rpm adb58bf6ad899b19a598d5bc4940b6519f7106b0042d0becd0dc66064884aa5b
x86_64 dotnet-targeting-pack-10.0-10.0.4-1.el9_7.x86_64.rpm ccc8031426f2751eb0dc8a3ac55bca17bf7590549c49e3bf54984689caeca923
x86_64 dotnet-templates-10.0-10.0.104-1.el9_7.x86_64.rpm dacd913e9b6126269ea95587a3be1ac793e9705e6f3d0805b4b2124a90c6ef5d
x86_64 dotnet-hostfxr-10.0-10.0.4-1.el9_7.x86_64.rpm f006d64ae0e254920faa00a72fa221dd80e5d26ad29fa15ec2a1eefd0b013407
x86_64 aspnetcore-runtime-10.0-10.0.4-1.el9_7.x86_64.rpm f9f3ef5476af5e48880abc9d06b2fcf5c754e06207ffec365ab3c0741407fe4d
x86_64 dotnet-apphost-pack-10.0-10.0.4-1.el9_7.x86_64.rpm fb4486d47e911113fcc441ae0cb7c9fd23b7d5152f61cf6fd3046188f9c1c876
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.