Alerts This Week
Warning Icon 1 825
Alerts This Week
Warning Icon 1 825

Fedora 43 dotnet10.0 Critical ASP.NET Core DoS Issue FEDORA-2026-854e553ffa

fedora
Calendar Grey March 20, 2026
Dist Fedora Esm H88
March 2026 release of .NET 10 for Fedora fixes critical Denial of Service issue with ASP.NET Core resources.
This is the March 2026 release of .NET 10

Summary

.NET is a fast, lightweight and modular platform for creating

cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web

applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of

framework libraries, an SDK containing compilers and a 'dotnet'

application to drive everything.

Update Information:

This is the March 2026 release of .NET 10. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.4/10.0.104.md Runtime: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.4/10.0.4.md

Topics%20covered

Topics Covered

security advisory denial of service fedora application dotnet runtime

Change Log

* Wed Mar 11 2026 Omair Majid - 10.0.104-1 - Update to .NET SDK 10.0.104 and Runtime 10.0.4

References


[ 1 ] Bug #2446426 - CVE-2026-26130 dotnet10.0: ASP.NET Core: Denial of Service via uncontrolled resource allocation [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2446426

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-854e553ffa' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: dotnet10.0
Product: Fedora 43
Version: 10.0.104
Release: 1.fc43
URL: https://github.com/dotnet/
Summary: .NET 10.0 Runtime and SDK

Topics%20covered

Topics Covered

security advisory denial of service fedora application dotnet runtime

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here