Home / mailings

PDF

[USN-8942-1] .NET vulnerabilities

Posted on 21 October 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8942-1
October 20, 2026

dotnet8, dotnet10, dotnet11 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in .NET.

Software Description:
- dotnet10: .NET CLI tools and runtime
- dotnet11: .NET CLI tools and runtime
- dotnet8: .NET CLI tools and runtime

Details:

Multiple security issues were discovered in .NET and this update includes
new upstream .NET versions to fix these issues.

.NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
.NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS
and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
aspnetcore-runtime-10.0 10.0.13-0ubuntu1~26.10.1
aspnetcore-runtime-11.0 11.0.0~rc2-0ubuntu1~26.10.1
dotnet-host-10.0 10.0.13-0ubuntu1~26.10.1
dotnet-host-11.0 11.0.0~rc2-0ubuntu1~26.10.1
dotnet-hostfxr-10.0 10.0.13-0ubuntu1~26.10.1
dotnet-hostfxr-11.0 11.0.0~rc2-0ubuntu1~26.10.1
dotnet-runtime-10.0 10.0.13-0ubuntu1~26.10.1
dotnet-runtime-11.0 11.0.0~rc2-0ubuntu1~26.10.1
dotnet-sdk-10.0 10.0.113-0ubuntu1~26.10.1
dotnet-sdk-11.0 11.0.100~rc2-0ubuntu1~26.10.1
dotnet-sdk-aot-10.0 10.0.113-0ubuntu1~26.10.1
dotnet-sdk-aot-11.0 11.0.100~rc2-0ubuntu1~26.10.1
dotnet-sdk-dbg-10.0 10.0.113-0ubuntu1~26.10.1
dotnet-sdk-dbg-11.0 11.0.100~rc2-0ubuntu1~26.10.1
dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1
dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1

Ubuntu 26.04 LTS
aspnetcore-runtime-10.0 10.0.13-0ubuntu1~26.04.1
dotnet-host-10.0 10.0.13-0ubuntu1~26.04.1
dotnet-hostfxr-10.0 10.0.13-0ubuntu1~26.04.1
dotnet-runtime-10.0 10.0.13-0ubuntu1~26.04.1
dotnet-sdk-10.0 10.0.113-0ubuntu1~26.04.1
dotnet-sdk-aot-10.0 10.0.113-0ubuntu1~26.04.1
dotnet-sdk-dbg-10.0 10.0.113-0ubuntu1~26.04.1
dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1

Ubuntu 24.04 LTS
aspnetcore-runtime-10.0 10.0.13-0ubuntu1~24.04.1
aspnetcore-runtime-8.0 8.0.32-0ubuntu1~24.04.1
dotnet-host-10.0 10.0.13-0ubuntu1~24.04.1
dotnet-host-8.0 8.0.32-0ubuntu1~24.04.1
dotnet-hostfxr-10.0 10.0.13-0ubuntu1~24.04.1
dotnet-hostfxr-8.0 8.0.32-0ubuntu1~24.04.1
dotnet-runtime-10.0 10.0.13-0ubuntu1~24.04.1
dotnet-runtime-8.0 8.0.32-0ubuntu1~24.04.1
dotnet-sdk-10.0 10.0.113-0ubuntu1~24.04.1
dotnet-sdk-8.0 8.0.132-0ubuntu1~24.04.1
dotnet-sdk-aot-10.0 10.0.113-0ubuntu1~24.04.1
dotnet-sdk-dbg-10.0 10.0.113-0ubuntu1~24.04.1
dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1
dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1

Ubuntu 22.04 LTS
aspnetcore-runtime-8.0 8.0.32-0ubuntu1~22.04.1
dotnet-host-8.0 8.0.32-0ubuntu1~22.04.1
dotnet-hostfxr-8.0 8.0.32-0ubuntu1~22.04.1
dotnet-runtime-8.0 8.0.32-0ubuntu1~22.04.1
dotnet-sdk-8.0 8.0.132-0ubuntu1~22.04.1
dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8942-1
CVE-2026-102870, CVE-2026-58280, CVE-2026-66822, CVE-2026-69651,
CVE-2026-70159, CVE-2026-70175, CVE-2026-70179, CVE-2026-70181,
CVE-2026-70183, CVE-2026-70186, CVE-2026-70188, CVE-2026-70194,
CVE-2026-70196, CVE-2026-84008, CVE-2026-88092, CVE-2026-92707,
CVE-2026-96222, CVE-2026-96225, CVE-2026-96230, CVE-2026-96231,
CVE-2026-96233, CVE-2026-96236, CVE-2026-96237, CVE-2026-96238,
CVE-2026-96957, CVE-2026-96958, CVE-2026-96959, CVE-2026-96960

Package Information:
https://launchpad.net/ubuntu/+source/dotnet10/10.0.113-10.0.13-0ubuntu1~26.10.1
https://launchpad.net/ubuntu/+source/dotnet11/11.0.100-11.0.0~rc2-0ubuntu1~26.10.1
https://launchpad.net/ubuntu/+source/dotnet10/10.0.113-10.0.13-0ubuntu1~26.04.1
https://launchpad.net/ubuntu/+source/dotnet10/10.0.113-10.0.13-0ubuntu1~24.04.1
https://launchpad.net/ubuntu/+source/dotnet8/8.0.132-8.0.32-0ubuntu1~24.04.1
https://launchpad.net/ubuntu/+source/dotnet8/8.0.132-8.0.32-0ubuntu1~22.04.1

--===============1821475414396484510==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP