RHSA-2026:86171
Vulnerability from csaf_redhat - Published: 2026-10-20 22:56 - Updated: 2026-10-21 04:36Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64 | — |
Vendor Fix
fix
|
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressure, excessive garbage collection, process termination, or loss of service. Exposure requires an application to deserialize untrusted data through the affected formatter path and permit repeated attacker-controlled submissions, such as a reachable ASP.NET Core SignalR hub method with an object parameter and AddMessagePackProtocol() enabled. This issue is fixed in versions 2.5.303 and 3.1.9.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a \u0027dotnet\u0027 application to drive everything.\n\nSDK version: 9.0.122\nRuntime version: 9.0.21\n\nSecurity Fix(es):\n\n* dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822)\n\n* dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651)\n\n* dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179)\n\n* dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181)\n\n* dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183)\n\n* dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186)\n\n* dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188)\n\n* dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196)\n\n* dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707)\n\n* dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225)\n\n* dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230)\n\n* dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231)\n\n* dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233)\n\n* dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236)\n\n* dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237)\n\n* dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 9.0 to SDK 9.0.122 and Runtime 9.0.21 [rhel-9.8.z] (JIRA:RHEL-277800)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:86171",
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2548778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548778"
},
{
"category": "external",
"summary": "2548781",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548781"
},
{
"category": "external",
"summary": "2548784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548784"
},
{
"category": "external",
"summary": "2548786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548786"
},
{
"category": "external",
"summary": "2548787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548787"
},
{
"category": "external",
"summary": "2548790",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548790"
},
{
"category": "external",
"summary": "2548791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548791"
},
{
"category": "external",
"summary": "2548792",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548792"
},
{
"category": "external",
"summary": "2548793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548793"
},
{
"category": "external",
"summary": "2548796",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548796"
},
{
"category": "external",
"summary": "2548798",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548798"
},
{
"category": "external",
"summary": "2548799",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548799"
},
{
"category": "external",
"summary": "2548800",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548800"
},
{
"category": "external",
"summary": "2548803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548803"
},
{
"category": "external",
"summary": "2548804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548804"
},
{
"category": "external",
"summary": "2548805",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548805"
},
{
"category": "external",
"summary": "2548806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548806"
},
{
"category": "external",
"summary": "2548807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548807"
},
{
"category": "external",
"summary": "2548808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548808"
},
{
"category": "external",
"summary": "2548809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548809"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86171.json"
}
],
"title": "Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-10-21T04:36:09+00:00",
"generator": {
"date": "2026-10-21T04:36:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:86171",
"initial_release_date": "2026-10-20T22:56:24+00:00",
"revision_history": [
{
"date": "2026-10-20T22:56:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-20T22:56:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-21T04:36:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9.0-0:9.0.122-1.el9_8.src",
"product": {
"name": "dotnet9.0-0:9.0.122-1.el9_8.src",
"product_id": "dotnet9.0-0:9.0.122-1.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0@9.0.122-1.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-0:9.0.122-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src"
},
"product_reference": "dotnet9.0-0:9.0.122-1.el9_8.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-58280",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548778"
}
],
"notes": [
{
"category": "description",
"text": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58280"
},
{
"category": "external",
"summary": "RHBZ#2548778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548778"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-66822",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548781"
}
],
"notes": [
{
"category": "description",
"text": "Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A moderate information disclosure vulnerability was found in the .NET runtime. When a .NET application using SocketsHttpHandler sends a request through a proxy that authenticates with basic credentials and the response is an HTTP redirect, the Proxy-Authorization header can be incorrectly retained and forwarded with the redirected request, leaking the basic proxy credentials to the destination server. This allows an unauthorized remote attacker to disclose sensitive proxy authentication information over a network. Red Hat rates this flaw Moderate severity with a CVSS 3.1 base score of 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N), consistent with the upstream assessment. All currently tracked Red Hat product streams shipping the affected dotnet8.0, dotnet9.0, and dotnet10.0 components, including Red Hat Enterprise Linux and Red Hat Hardened Images, are affected, and fixes are being pursued through the respective product channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66822"
},
{
"category": "external",
"summary": "RHBZ#2548781",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548781"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability"
},
{
"cve": "CVE-2026-69651",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548784"
}
],
"notes": [
{
"category": "description",
"text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69651"
},
{
"category": "external",
"summary": "RHBZ#2548784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-70159",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548786"
}
],
"notes": [
{
"category": "description",
"text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70159"
},
{
"category": "external",
"summary": "RHBZ#2548786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70159"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-70175",
"cwe": {
"id": "CWE-640",
"name": "Weak Password Recovery Mechanism for Forgotten Password"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548787"
}
],
"notes": [
{
"category": "description",
"text": "Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70175"
},
{
"category": "external",
"summary": "RHBZ#2548787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548787"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70175"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-70179",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548790"
}
],
"notes": [
{
"category": "description",
"text": "Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70179"
},
{
"category": "external",
"summary": "RHBZ#2548790",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548790"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70179",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70179"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70179",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70179"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-70181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548791"
}
],
"notes": [
{
"category": "description",
"text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70181"
},
{
"category": "external",
"summary": "RHBZ#2548791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70181"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-70183",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548792"
}
],
"notes": [
{
"category": "description",
"text": "Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An elevation of privilege flaw, rated IMPORTANT by Red Hat Product Security, was found in the Blazor AuthorizeRouteView component of ASP.NET Core. Due to improper synchronization of concurrent execution using a shared resource (a race condition), a stale asynchronous authorization result can be applied after navigation or an authorization-state change, bypassing the current [Authorize] decision. An authorized remote attacker with low privileges could exploit this issue over a network, with high attack complexity, to elevate privileges within the application, affecting confidentiality, integrity, and availability (CVSS 3.1: 7.5, CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Red Hat products that ship the affected ASP.NET Core Runtime, tracked under the dotnet, dotnet8.0, dotnet9.0, and dotnet10.0 components, are affected across the impacted streams and a fix is being pursued. The Red Hat severity assessment (IMPORTANT, CVSS 7.5) is consistent with the upstream CVSS score of 7.5.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70183"
},
{
"category": "external",
"summary": "RHBZ#2548792",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548792"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70183"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. The upstream advisory states that the issue is fixed in ASP.NET Core Runtime 8.0.32, 9.0.21, and 10.0.13 (and 11.0.0-rc.2 for the .NET 11 pre-release channel); users should apply the patched versions of the affected .NET components for their Red Hat offerings once available.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-70186",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548793"
}
],
"notes": [
{
"category": "description",
"text": "Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70186"
},
{
"category": "external",
"summary": "RHBZ#2548793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548793"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70186"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-70188",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548796"
}
],
"notes": [
{
"category": "description",
"text": "Inconsistent interpretation of http requests (\u0027http request/response smuggling\u0027) in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core Security Feature Bypass Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can exploit HTTP/2 header parsing flaws over network connections without privileges or user interaction, potentially leading to security control bypasses and HTTP request smuggling. ASP.NET Core applications running on Red Hat Enterprise Linux that use Kestrel as a public-facing web server handling HTTP/2 connections are directly exposed. Services utilizing HTTP/1.1 exclusively or processing pre-validated traffic are not exposed to the specific HTTP/2 HPACK parsing flaws.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70188"
},
{
"category": "external",
"summary": "RHBZ#2548796",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548796"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70188"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "dotnet: ASP.NET Core Security Feature Bypass Vulnerability"
},
{
"cve": "CVE-2026-70196",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548798"
}
],
"notes": [
{
"category": "description",
"text": "Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70196"
},
{
"category": "external",
"summary": "RHBZ#2548798",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548798"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70196"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-88092",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548799"
}
],
"notes": [
{
"category": "description",
"text": "Inconsistent interpretation of http requests (\u0027http request/response smuggling\u0027) in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core Tampering Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as having a Critical impact because it allows remote, unauthenticated attackers to execute HTTP request smuggling attacks without requiring user interaction or specialized privileges. ASP.NET Core web applications deployed across Red Hat platforms using Kestrel to process HTTP/1 requests are susceptible if aborted connections lead to desynchronized request boundaries. Exploitation of this desynchronization can result in severe integrity and confidentiality impacts, such as request tampering, credential exposure, or proxy filter evasion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-88092"
},
{
"category": "external",
"summary": "RHBZ#2548799",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548799"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-88092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88092"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88092",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88092"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "dotnet: ASP.NET Core Tampering Vulnerability"
},
{
"cve": "CVE-2026-92707",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548800"
}
],
"notes": [
{
"category": "description",
"text": "MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressure, excessive garbage collection, process termination, or loss of service. Exposure requires an application to deserialize untrusted data through the affected formatter path and permit repeated attacker-controlled submissions, such as a reachable ASP.NET Core SignalR hub method with an object parameter and AddMessagePackProtocol() enabled. This issue is fixed in versions 2.5.303 and 3.1.9.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92707"
},
{
"category": "external",
"summary": "RHBZ#2548800",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548800"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92707"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92707",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92707"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits"
},
{
"cve": "CVE-2026-96225",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548803"
}
],
"notes": [
{
"category": "description",
"text": "Improper link resolution before file access (\u0027link following\u0027) in .NET allows an authorized attacker to elevate privileges locally.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96225"
},
{
"category": "external",
"summary": "RHBZ#2548803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548803"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96225",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96225"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96225",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96225"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-96230",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548804"
}
],
"notes": [
{
"category": "description",
"text": "Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027) in ASP.NET Core allows an unauthorized attacker to execute code over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96230"
},
{
"category": "external",
"summary": "RHBZ#2548804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96230",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96230"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability"
},
{
"cve": "CVE-2026-96231",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548805"
}
],
"notes": [
{
"category": "description",
"text": "Improper link resolution before file access (\u0027link following\u0027) in .NET allows an authorized attacker to elevate privileges locally.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96231"
},
{
"category": "external",
"summary": "RHBZ#2548805",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548805"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96231",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96231"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-96233",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548806"
}
],
"notes": [
{
"category": "description",
"text": "Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96233"
},
{
"category": "external",
"summary": "RHBZ#2548806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548806"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96233",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96233"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-96236",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548807"
}
],
"notes": [
{
"category": "description",
"text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96236"
},
{
"category": "external",
"summary": "RHBZ#2548807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96236"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-96237",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548808"
}
],
"notes": [
{
"category": "description",
"text": "Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96237"
},
{
"category": "external",
"summary": "RHBZ#2548808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548808"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96237"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability"
},
{
"cve": "CVE-2026-96238",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548809"
}
],
"notes": [
{
"category": "description",
"text": "Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96238"
},
{
"category": "external",
"summary": "RHBZ#2548809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96238"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96238",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96238"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-20T22:56:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:86171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-0:9.0.122-1.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.