{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft .NET 10.0 installed on Linux: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--net-10-0-installed-on-linux/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--net-10-0-installed-on-linux/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · disclosed",
   "content_text": "Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 13 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.Components.WebAssembly.Server 10.0.13, Microsoft.AspNetCore.Components.WebAssembly.Server 11.0.0-rc.2.26478.115.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102870/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102870/",
   "title": "CVE-2026-102870 · Microsoft .NET 10.0 installed on Linux · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70197/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70197/",
   "title": "CVE-2026-70197 · Microsoft .NET 10.0 installed on Linux · disclosed",
   "content_text": "Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70197/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70197/",
   "title": "CVE-2026-70197 · Microsoft .NET 10.0 installed on Linux · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.NETCore.App.Runtime.win-arm64 10.0.13, Microsoft.NETCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-arm64 8.0.32, Microsoft.NETCore.App.Runtime.win-arm64 9.0.21, Microsoft.NETCore.App.Runtime.win-x64 10.0.13, Microsoft.NETCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x64 8.0.32, Microsoft.NETCore.App.Runtime.win-x64 9.0.21, Microsoft.NETCore.App.Runtime.win-x86 10.0.13, Microsoft.NETCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.NETCore.App.Runtime.win-x86 8.0.32, Microsoft.NETCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70197/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70197/",
   "title": "CVE-2026-70197 · Microsoft .NET 10.0 installed on Linux · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 12 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet8.0 0:8.0.132-0.1.hum1.",
   "date_published": "2026-10-13T19:00:26Z"
  }
 ]
}