[ubuntu/questing-security] dotnet10 10.0.109-10.0.9-0ubuntu1~25.10.1 (Accepted)

[Ian Constantin]

dotnet10 (10.0.109-10.0.9-0ubuntu1~25.10.1) questing-security; urgency=medium

  [ Mateus Rodrigues de Morais ]
  * New upstream release
  * SECURITY UPDATE: arbitrary file write
    - CVE-2026-45491: improper link resolution before file access
      ('link following') in .NET allows an unauthorized attacker to perform
      local tampering.
  * SECURITY UPDATE: denial of service
    - CVE-2026-45591: Stack overflow DoS via deeply-nested MessagePack arrays.

Date: 2026-06-10 09:17:11.108188+00:00
Changed-By: Ian Constantin <ian.constantin at canonical.com>
https://launchpad.net/ubuntu/+source/dotnet10/10.0.109-10.0.9-0ubuntu1~25.10.1
-------------- next part --------------
Sorry, changesfile not available.