[ubuntu/questing-security] dotnet8 8.0.128-8.0.28-0ubuntu1~25.10.1 (Accepted)

[Ian Constantin]

dotnet8 (8.0.128-8.0.28-0ubuntu1~25.10.1) questing-security; urgency=medium

  [ Mateus Rodrigues de Morais ]
  * New upstream release
  * SECURITY UPDATE: arbitrary file write
    - CVE-2026-45491: improper link resolution before file access
      ('link following') in .NET allows an unauthorized attacker to perform
      local tampering.
  * SECURITY UPDATE: denial of service
    - CVE-2026-45591: Stack overflow DoS via deeply-nested MessagePack arrays.

Date: 2026-06-10 08:56:11.007088+00:00
Changed-By: Ian Constantin <ian.constantin at canonical.com>
https://launchpad.net/ubuntu/+source/dotnet8/8.0.128-8.0.28-0ubuntu1~25.10.1
-------------- next part --------------
Sorry, changesfile not available.