RHSA-2026:86170
Vulnerability from csaf_opensuse - Published: 2026-10-20 00:00 - Updated: 2026-10-22 10:38Summary
security update for dotnet9.0
Severity
Critical
Notes
Title of the patch: security update for dotnet9.0
Description of the patch: This security update provides a functional equivalent of RHSA-2026:86170.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:86170.
Patchnames: RHSA-2026:86170
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
moderate
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
critical
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
moderate
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
critical
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
moderate
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
important
Affected products
Recommended
14 products, the same list as for
CVE-2026-58280
Threats
Impact
moderate
References
42 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for dotnet9.0",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:86170.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:86170.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:86170",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_86170.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-58280 page",
"url": "https://www.suse.com/security/cve/CVE-2026-58280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-66822 page",
"url": "https://www.suse.com/security/cve/CVE-2026-66822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-69651 page",
"url": "https://www.suse.com/security/cve/CVE-2026-69651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70159 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70175 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70179 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70181 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70183 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70188 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-70196 page",
"url": "https://www.suse.com/security/cve/CVE-2026-70196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-88092 page",
"url": "https://www.suse.com/security/cve/CVE-2026-88092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92707 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96225 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96230 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96231 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96233 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96236 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96237 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96238 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96238/"
}
],
"title": "security update for dotnet9.0",
"tracking": {
"current_release_date": "2026-10-22T10:38:55Z",
"generator": {
"date": "2026-10-20T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:86170",
"initial_release_date": "2026-10-20T00:00:00Z",
"revision_history": [
{
"date": "2026-10-20T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-22T10:38:55Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/aspnetcore-runtime-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/aspnetcore-runtime-dbg-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/aspnetcore-targeting-pack-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-apphost-pack-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-hostfxr-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-runtime-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-runtime-dbg-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-sdk-9.0@9.0.122-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-sdk-aot-9.0@9.0.122-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-sdk-dbg-9.0@9.0.122-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-targeting-pack-9.0@9.0.21-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dotnet-templates-9.0@9.0.122-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/netstandard-targeting-pack-2.1@9.0.122-1.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-58280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-58280"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-58280",
"url": "https://www.suse.com/security/cve/CVE-2026-58280"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-58280"
},
{
"cve": "CVE-2026-66822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-66822"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-66822",
"url": "https://www.suse.com/security/cve/CVE-2026-66822"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-66822"
},
{
"cve": "CVE-2026-69651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-69651"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-69651",
"url": "https://www.suse.com/security/cve/CVE-2026-69651"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-69651"
},
{
"cve": "CVE-2026-70159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70159"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70159",
"url": "https://www.suse.com/security/cve/CVE-2026-70159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-70159"
},
{
"cve": "CVE-2026-70175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70175"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70175",
"url": "https://www.suse.com/security/cve/CVE-2026-70175"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-70175"
},
{
"cve": "CVE-2026-70179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70179"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70179",
"url": "https://www.suse.com/security/cve/CVE-2026-70179"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-70179"
},
{
"cve": "CVE-2026-70181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70181"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70181",
"url": "https://www.suse.com/security/cve/CVE-2026-70181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-70181"
},
{
"cve": "CVE-2026-70183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70183"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70183",
"url": "https://www.suse.com/security/cve/CVE-2026-70183"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-70183"
},
{
"cve": "CVE-2026-70186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70186"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70186",
"url": "https://www.suse.com/security/cve/CVE-2026-70186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-70186"
},
{
"cve": "CVE-2026-70188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70188"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70188",
"url": "https://www.suse.com/security/cve/CVE-2026-70188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-70188"
},
{
"cve": "CVE-2026-70196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-70196"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-70196",
"url": "https://www.suse.com/security/cve/CVE-2026-70196"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-70196"
},
{
"cve": "CVE-2026-88092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-88092"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-88092",
"url": "https://www.suse.com/security/cve/CVE-2026-88092"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-88092"
},
{
"cve": "CVE-2026-92707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92707"
}
],
"notes": [
{
"category": "general",
"text": "MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressure, excessive garbage collection, process termination, or loss of service. Exposure requires an application to deserialize untrusted data through the affected formatter path and permit repeated attacker-controlled submissions, such as a reachable ASP.NET Core SignalR hub method with an object parameter and AddMessagePackProtocol() enabled. This issue is fixed in versions 2.5.303 and 3.1.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92707",
"url": "https://www.suse.com/security/cve/CVE-2026-92707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-92707"
},
{
"cve": "CVE-2026-96225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96225"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96225",
"url": "https://www.suse.com/security/cve/CVE-2026-96225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-96225"
},
{
"cve": "CVE-2026-96230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96230"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96230",
"url": "https://www.suse.com/security/cve/CVE-2026-96230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-96230"
},
{
"cve": "CVE-2026-96231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96231"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96231",
"url": "https://www.suse.com/security/cve/CVE-2026-96231"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-96231"
},
{
"cve": "CVE-2026-96233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96233"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96233",
"url": "https://www.suse.com/security/cve/CVE-2026-96233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-96233"
},
{
"cve": "CVE-2026-96236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96236"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96236",
"url": "https://www.suse.com/security/cve/CVE-2026-96236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-96236"
},
{
"cve": "CVE-2026-96237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96237"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96237",
"url": "https://www.suse.com/security/cve/CVE-2026-96237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-96237"
},
{
"cve": "CVE-2026-96238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96238"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96238",
"url": "https://www.suse.com/security/cve/CVE-2026-96238"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aspnetcore-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-apphost-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-hostfxr-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-runtime-dbg-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-aot-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-sdk-dbg-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-targeting-pack-9.0-0:9.0.21-1.el8_10.x86_64",
"SUSE Liberty Linux 8:dotnet-templates-9.0-0:9.0.122-1.el8_10.x86_64",
"SUSE Liberty Linux 8:netstandard-targeting-pack-2.1-0:9.0.122-1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-96238"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.