Bugs fixes in "dotnet8"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-96960 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96959 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96958 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96238 | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-19 |
| CVE | CVE-2026-96237 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE | CVE-2026-96236 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96233 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96231 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-19 |
| CVE | CVE-2026-96230 | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code | 2026-10-19 |
| CVE | CVE-2026-96225 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-19 |
| CVE | CVE-2026-96222 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 2026-10-19 |
| CVE | CVE-2026-92707 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Objec | 2026-10-19 |
| CVE | CVE-2026-88092 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering | 2026-10-19 |
| CVE | CVE-2026-84008 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-70196 | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-70188 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security | 2026-10-19 |
| CVE | CVE-2026-70186 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-70183 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate | 2026-10-19 |
| CVE | CVE-2026-70181 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-70179 | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 2026-10-19 |
About
-
Send Feedback to @ubuntu_updates
