[ubuntu/questing-security] dotnet10 10.0.106-10.0.6-0ubuntu1~25.10.1 (Accepted)

[Ian Constantin]

dotnet10 (10.0.106-10.0.6-0ubuntu1~25.10.1) questing-security; urgency=medium

  [ Mateus Rodrigues de Morais ]
  * New upstream release
  * SECURITY UPDATE: denial of service
    - CVE-2026-33116: Possible denial of service via infinite recursion in
      XmlDecryptionTransform.
  * SECURITY UPDATE: denial of service
    - CVE-2026-32203: Possible denial of service via stack overflow in
      EncryptedKey nested decryption.
  * SECURITY UPDATE: remote code execution
    - CVE-2026-32178: SMTP command injection and header injection via
      MailAddress parsing flaw in System.Net.Mail.
  * SECURITY UPDATE: security feature bypass
    - CVE-2026-26171: denial of service and security feature bypass via unsafe
      transforms in EncryptedXml.

dotnet10 (10.0.105-10.0.5-0ubuntu1~25.10.1) questing; urgency=medium

  * New upstream release. (LP: #2144328)

Date: 2026-04-14 21:25:16.744931+00:00
Changed-By: Ian Constantin <ian.constantin at canonical.com>
https://launchpad.net/ubuntu/+source/dotnet10/10.0.106-10.0.6-0ubuntu1~25.10.1
-------------- next part --------------
Sorry, changesfile not available.