Summary
Multiple security issues were discovered in .NET and this update includes
new upstream .NET versions to fix these issues.
.NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
.NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS
and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10.
In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | dotnet8 | 8.0.132-8.0.32-0ubuntu1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet10 | 10.0.113-10.0.13-0ubuntu1~24.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet8 | 8.0.132-8.0.32-0ubuntu1~24.04.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | dotnet10 | 10.0.113-10.0.13-0ubuntu1~26.04.1 |
| Ubuntu · 26.10 | dotnet10 | 10.0.113-10.0.13-0ubuntu1~26.10.1 |
| Ubuntu · 26.10 | dotnet11 | 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1 |
Vulnerabilities 28
-
Critical 9.4
ASP.NET Core Tampering Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
-
Critical 9.1
ASP.NET Core Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.8
ASP.NET Core Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
-
High 8.8CVE-2026-96230 Public exploit
ASP.NET Core Remote Code Execution Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
-
High 8.8
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.1
ASP.NET Core Elevation of Privilege Vulnerability
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
High 7.8
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
High 7.5
.NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.4
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.5
.NET Framework Security Feature Bypass Vulnerability
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.5
.NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.9
.NET Information Disclosure Vulnerability
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
Medium 5.3
MessagePack: Nested arrays can blow past buffer length limits
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] …
References
-
report
https://ubuntu.com/security/CVE-2026-58280
-
report
https://ubuntu.com/security/CVE-2026-66822
-
report
https://ubuntu.com/security/CVE-2026-69651
-
report
https://ubuntu.com/security/CVE-2026-70159
-
report
https://ubuntu.com/security/CVE-2026-70175
-
report
https://ubuntu.com/security/CVE-2026-70179
-
report
https://ubuntu.com/security/CVE-2026-70181
-
report
https://ubuntu.com/security/CVE-2026-70183
-
report
https://ubuntu.com/security/CVE-2026-70186
-
report
https://ubuntu.com/security/CVE-2026-70188
-
report
https://ubuntu.com/security/CVE-2026-70194
-
report
https://ubuntu.com/security/CVE-2026-70196
-
report
https://ubuntu.com/security/CVE-2026-84008
-
report
https://ubuntu.com/security/CVE-2026-88092
-
report
https://ubuntu.com/security/CVE-2026-92707
-
report
https://ubuntu.com/security/CVE-2026-96222
-
report
https://ubuntu.com/security/CVE-2026-96225
-
report
https://ubuntu.com/security/CVE-2026-96230
-
report
https://ubuntu.com/security/CVE-2026-96231
-
report
https://ubuntu.com/security/CVE-2026-96233
-
report
https://ubuntu.com/security/CVE-2026-96236
-
report
https://ubuntu.com/security/CVE-2026-96237
-
report
https://ubuntu.com/security/CVE-2026-96238
-
report
https://ubuntu.com/security/CVE-2026-96957
-
report
https://ubuntu.com/security/CVE-2026-96958
-
report
https://ubuntu.com/security/CVE-2026-96959
-
report
https://ubuntu.com/security/CVE-2026-96960
-
report
https://ubuntu.com/security/CVE-2026-102870