BuildRiot
Sign in

NewsSource: Microsoft

Microsoft releases October security updates for .NET and .NET Framework

Image published by Microsoft
Image: Microsoft (Publisher press kit)

Microsoft’s October servicing announcement lists.NET updates dated October 13, 2026, alongside new.NET Framework security and non-security updates. The.NET releases—10.0.13, 9.0.21 and 8.0.32—include security and non-security fixes. Microsoft’s announcement links to release notes, installers, binaries and container images. Microsoft’s.NET 10 release notes list fixes for information disclosure and denial of service. BleepingComputer reported that the updates also address CVE-2026-108398, a.NET Framework security-feature bypass publicly disclosed before patching. Sources: Microsoft, BleepingComputer

Why it matters

Developers and administrators should review production hosts, build environments and applications that bundle a runtime, then deploy the servicing release for their .NET branch. Container users should refresh base images, rebuild, redeploy and verify the deployed runtime; Microsoft confirmed updated .NET 10 Docker images. [3] Check the applicable update documentation for your Windows and .NET Framework versions before deployment.

Attribution

Sources

  1. 1Microsoft.NET and .NET Framework October 2026 servicing releases updatesSource published (UTC)
  2. 2BleepingComputerMicrosoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-daysSource published (UTC)
  3. 3Microsoft.NET 10.0.13 release notesSource published (UTC)

Read the original source for full details and context.

Report a problem

Links, dates or what you expected. Do not include passwords or private data.

More on Backend

All Backend stories
EditorialSource: Firebase

Google adds QueryData preview to Firestore with MongoDB compatibility

Google announced QueryData support for Firestore with MongoDB compatibility on October 12, 2026. [1] Google says the feature lets developers build data agents that query database content through conversational language. [1] Its documentation says QueryData translates natural-language questions into MongoDB-compatible Query Language (MQL) queries, using developer-supplied context sets with database-specific information. [2] The feature is in preview, with potentially limited support. [2]

Published

EditorialSource: KrakenD

KrakenD releases Enterprise 2.13.11 security backport and Community and Enterprise 3.0.1

KrakenD released Enterprise Edition 2.13.11 as a recommended security backport on October 13, 2026, according to its changelog. [1] The changelog also lists Community and Enterprise Edition 3.0.1 releases that day. [1] It says the backport upgrades Go to 1.26.9 and updates amqp and OpenTelemetry dependencies for listed security issues. [1] According to Red Hat, CVE-2026-97032 lets an unauthenticated remote attacker crash Go’s HTTP/2 server if they win an HPACK encoder race. [2] KrakenD says affected versions are exposed when the gateway accepts HTTP/2 through Transport Layer Security negotiation or use_h2c. [3]

Published