Linux · Security advisory · July 20, 2026
ALSA-2026:41900: Security update for 15 packages
ALSA-2026:41900, released July 20, 2026, fixes 17 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
17
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0402
90th percentile
Priority of the 17 CVEs
Patch now 0
Urgent 0
High 17
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| aspnetcore-runtime-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| aspnetcore-runtime-dbg-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| aspnetcore-targeting-pack-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| dotnet | almalinux 8 | 10.0.110-1.el8_10 |
| dotnet-apphost-pack-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| dotnet-host | almalinux 8 | 10.0.10-1.el8_10 |
| dotnet-hostfxr-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| dotnet-runtime-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| dotnet-runtime-dbg-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| dotnet-sdk-10.0 | almalinux 8 | 10.0.110-1.el8_10 |
| dotnet-sdk-10.0-source-built-artifacts | almalinux 8 | 10.0.110-1.el8_10 |
| dotnet-sdk-aot-10.0 | almalinux 8 | 10.0.110-1.el8_10 |
| dotnet-sdk-dbg-10.0 | almalinux 8 | 10.0.110-1.el8_10 |
| dotnet-targeting-pack-10.0 | almalinux 8 | 10.0.10-1.el8_10 |
| dotnet-templates-10.0 | almalinux 8 | 10.0.110-1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability | 8.8 | 0.0402 | Exploitation Less Likely | |
| High | CVE-2026-50649 | .NET Remote Code Execution Vulnerability | 8.8 | 0.0402 | Exploitation Less Likely | |
| High | CVE-2026-50524 | .NET Framework Denial of Service Vulnerability | 8.8 | 0.0123 | Exploitation Less Likely | |
| High | CVE-2026-47302 | .NET Denial of Service Vulnerability | 8.8 | 0.0117 | Exploitation Less Likely | |
| High | CVE-2026-50525 | .NET Denial of Service Vulnerability | 8.8 | 0.0117 | Exploitation Less Likely | |
| High | CVE-2026-50527 | .NET Framework Denial of Service Vulnerability | 8.8 | 0.0117 | Exploitation Less Likely | |
| High | CVE-2026-50648 | .NET Framework Denial of Service Vulnerability | 8.8 | 0.0117 | Exploitation Less Likely | |
| High | CVE-2026-50651 | .NET Denial of Service Vulnerability | 8.8 | 0.0117 | Exploitation Less Likely | |
| High | CVE-2026-56170 | ASP.NET Core Denial of Service Vulnerability | 8.8 | 0.0117 | Exploitation Less Likely | |
| High | CVE-2026-57108 | .NET Denial of Service Vulnerability | 8.8 | 0.0117 | Exploitation Less Likely | |
| High | CVE-2026-47303 | ASP.NET Core Elevation of Privilege Vulnerability | 8.8 | 0.0084 | Exploitation Less Likely | |
| High | CVE-2026-47300 | ASP.NET Core Elevation of Privilege Vulnerability | 8.8 | 0.0078 | Exploitation Less Likely | |
| High | CVE-2026-50659 | .NET Spoofing Vulnerability | 8.8 | 0.0074 | Exploitation Less Likely | |
| High | CVE-2026-50528 | .NET Security Feature Bypass Vulnerability | 8.8 | 0.0061 | Exploitation Less Likely | |
| High | CVE-2026-50650 | .NET Framework Elevation of Privilege Vulnerability | 8.8 | 0.0046 | Exploitation Less Likely | |
| High | CVE-2026-47304 | .NET Security Feature Bypass Vulnerability | 9.8 | 0.0029 | Exploitation Less Likely | |
| High | CVE-2026-50526 | .NET Tampering Vulnerability | 8.8 | 0.0022 | Exploitation Less Likely |
Showing 1 to 17 of 17
1