#CVE2026114148
LightNews LightNews
barretblake.dev
From the .NET blog...

.NET October 2026 Out-of-Band Security Updates
https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates/ #dotnet #MaintenanceUpdates #Security #NET10 #NET11 #NET8 #NET9 #CVE2026111497 #CVE2026114148 #OOB
blog post hero image
October 25, 2026 at 7:00 PM
barretblake.dev
From the .NET blog...

In case you missed it earlier...

.NET October 2026 Out-of-Band Security Updates
https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates/ #dotnet #MaintenanceUpdates #Security #NET10 #NET11 #NET8 #NET9 #CVE2026111497 #CVE2026114148 #OOB
blog post hero image
October 26, 2026 at 3:15 AM
securityonline.bsky.social
Microsoft's out-of-band .NET security update fixes Brotli flaw CVE-2026-111497 and Linux tarball bug CVE-2026-114148. Update to 8.0.33 or 9.0.22.

#DotNET #Microsoft #Brotli #CVE2026111497 #CVE2026114148 #CVE202670197 #ASPNETCore #CyberSecurity
Microsoft Ships Out-of-Band .NET Updates for Brotli Overflow and Linux Tarball Flaws
TL;DR Microsoft has released an out-of-band .NET security update for .NET 8, 9 and 10, plus .NET 11 Release Candidate 3. It fixes CVE-2026-111497, a Brotli decompression buffer overflow, and CVE-2026-114148, a Linux tarball ownership flaw. The release also completes fixes for two October 13 bugs that were not fully patched. Why It Matters .NET runs a huge range of web apps, APIs and services.
securityonline.info
October 26, 2026 at 1:44 AM