UbuntuUpdates.org

Package "dotnet10"

Name: dotnet10

Description:

.NET CLI tools and runtime
Latest version: 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2
Release: questing (25.10)
Level: updates
Repository: universe
Homepage: https://dot.net

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "dotnet10"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "dotnet10" in Questing

Repository Area Version
security universe 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 10.0.100-10.0.0~rc2-0ubuntu1~25.10.2 2025-10-15 16:07:19 UTC

  dotnet10 (10.0.100-10.0.0~rc2-0ubuntu1~25.10.2) questing-security; urgency=medium

  [ Dominik Viererbe ]
  * New upstream release
  * SECURITY UPDATE: denial of service
    - CVE-2025-55247: A vulnerability exists in .NET Core where predictable
      paths for MSBuild's temporary directories on Linux let another user
      create the directories ahead of MSBuild, leading to DoS of builds.
  * SECURITY UPDATE: validation bypass
    - CVE-2025-55315: Inconsistent interpretation of http requests
      ('http request/response smuggling') in ASP.NET Core allows an authorized
      attacker to bypass a security feature over a network.

 -- Ian Constantin <email address hidden> Tue, 14 Oct 2025 22:24:22 +0300
CVE-2025-55247 Improper link resolution before file access ('link following') in .NET ...
CVE-2025-55315 Inconsistent interpretation of http requests ('http request/response s ...


About   -   Send Feedback to @ubuntu_updates