Bugs fixes in "dotnet10"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-92707 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Objec | 2026-10-21 |
| CVE | CVE-2026-88092 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering | 2026-10-21 |
| CVE | CVE-2026-84008 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-70196 | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-70188 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security | 2026-10-21 |
| CVE | CVE-2026-70186 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-70183 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate | 2026-10-21 |
| CVE | CVE-2026-70181 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-70179 | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 2026-10-21 |
| CVE | CVE-2026-70175 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 2026-10-21 |
| CVE | CVE-2026-70159 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-69651 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-66822 | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-21 |
| CVE | CVE-2026-58280 | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-102870 | Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network. | 2026-10-21 |
| CVE | CVE-2026-96960 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-96959 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-96958 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-21 |
| CVE | CVE-2026-96957 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-21 |
| CVE | CVE-2026-96238 | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-21 |
About
-
Send Feedback to @ubuntu_updates
