USN-9042-1: dotnet8, dotnet10, dotnet11 vulnerabilities

Q: Which Ubuntu releases received the updated .NET packages?

.NET 8 was updated on Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 was updated on Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10, while .NET 11 was updated on Ubuntu 26.10.

Q: Which package versions contain the fixes?

The fixed versions are .NET 8 version 8.0.34, .NET 10 version 10.0.15, and .NET 11 version 11.0.0 on the Ubuntu releases listed in the notice.

Q: Should deployments be tested after applying the update?

Yes. The updated packages include bug fixes and new features in addition to security fixes, and may contain incompatible changes.

Published Nov 11, 2026

Updated

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues.

.NET 8 has been updated to 8.0.34 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.15 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0 in Ubuntu 26.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Affected Software

6 affected componentsFixes available

ubuntu/dotnet8<8.0.134-8.0.34-0ubuntu1~22.04.1

8.0.134-8.0.34-0ubuntu1~22.04.1

ubuntu/dotnet10<10.0.115-10.0.15-0ubuntu1~24.04.1

10.0.115-10.0.15-0ubuntu1~24.04.1

ubuntu/dotnet8<8.0.134-8.0.34-0ubuntu1~24.04.1

8.0.134-8.0.34-0ubuntu1~24.04.1

ubuntu/dotnet10<10.0.115-10.0.15-0ubuntu1~26.10.1

10.0.115-10.0.15-0ubuntu1~26.10.1

ubuntu/dotnet11<11.0.100-11.0.0-0ubuntu1~26.10.1

11.0.100-11.0.0-0ubuntu1~26.10.1

ubuntu/dotnet10<10.0.115-10.0.15-0ubuntu1~26.04.1

10.0.115-10.0.15-0ubuntu1~26.04.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/dotnet8 to a version that resolves this vulnerability.
Fixed in 8.0.134-8.0.34-0ubuntu1~22.04.1
Upgrade
Upgrade ubuntu/dotnet10 to a version that resolves this vulnerability.
Fixed in 10.0.115-10.0.15-0ubuntu1~24.04.1
Upgrade
Upgrade ubuntu/dotnet8 to a version that resolves this vulnerability.
Fixed in 8.0.134-8.0.34-0ubuntu1~24.04.1
Upgrade
Upgrade ubuntu/dotnet10 to a version that resolves this vulnerability.
Fixed in 10.0.115-10.0.15-0ubuntu1~26.10.1
Upgrade
Upgrade ubuntu/dotnet11 to a version that resolves this vulnerability.
Fixed in 11.0.100-11.0.0-0ubuntu1~26.10.1
Upgrade
Upgrade ubuntu/dotnet10 to a version that resolves this vulnerability.
Fixed in 10.0.115-10.0.15-0ubuntu1~26.04.1
Upgrade
Upgrade dotnet10 to a version that resolves this vulnerability.
Fixed in 10.0.15
Upgrade
Upgrade dotnet11 to a version that resolves this vulnerability.
Fixed in 11.0.0
Upgrade
Upgrade dotnet8 to a version that resolves this vulnerability.
Fixed in 8.0.34

Event History

Nov 11, 2026

Advisory Published

via OSV·04:53 PM

Data Sourced

via OSV·04:53 PM

DescriptionAffected Software

Frequently Asked Questions

Which Ubuntu releases received the updated .NET packages?

.NET 8 was updated on Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 was updated on Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10, while .NET 11 was updated on Ubuntu 26.10.

Which package versions contain the fixes?

The fixed versions are .NET 8 version 8.0.34, .NET 10 version 10.0.15, and .NET 11 version 11.0.0 on the Ubuntu releases listed in the notice.

Should deployments be tested after applying the update?

Yes. The updated packages include bug fixes and new features in addition to security fixes, and may contain incompatible changes.

USN-9042-1: dotnet8, dotnet10, dotnet11 vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which Ubuntu releases received the updated .NET packages?

Which package versions contain the fixes?

Should deployments be tested after applying the update?

Company

Resources

Contact