Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-45591 (GCVE-0-2026-45591)
Vulnerability from cvelistv5 – Published: 2026-06-09 17:05 – Updated: 2026-08-25 22:43
VLAI
EPSS
VEX
Title
ASP.NET Core Denial of Service Vulnerability
Summary
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-10 13:47 UTC
CWE
Assigner
References
21 references
Impacted products
24 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Microsoft | .NET 10.0 |
Affected:
10.0.0 , < 10.0.9
(custom)
|
guessed | |
| Microsoft | .NET 8.0 |
Affected:
8.0.0 , < 8.0.28
(custom)
|
guessed | |
| Microsoft | .NET 9.0 |
Affected:
9.0.0 , < 9.0.17
(custom)
|
guessed | |
| Microsoft | ASP.NET Core 10.0 |
Affected:
10.0 , < 10.0.9
(custom)
|
guessed | |
| Microsoft | ASP.NET Core 8.0 |
Affected:
8.0 , < 8.0.28
(custom)
|
guessed | |
| Microsoft | ASP.NET Core 9.0 |
Affected:
9.0 , < 9.0.17
(custom)
|
guessed | |
| Microsoft | Microsoft Visual Studio 2026 version 18.6 |
Affected:
18.6.0 , < 18.6.3
(custom)
|
guessed | |
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:8.0.128-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:9.0.118-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:10.0.109-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:8.0.128-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:9.0.118-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:8.0.128-1.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:9.0.118-1.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:10.0.109-1.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:8.0.128-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:9.0.118-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:10.0.109-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:8.0.128-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:8.0.128-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:9.0.118-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
9.0.117-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
10.0.109-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
8.0.128-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
Date Public
2026-06-09 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-45591",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-10T13:47:51.768280Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-10T13:47:58.238Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:8.0.128-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:9.0.118-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "dotnet10.0",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.0.109-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:8.0.128-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:9.0.118-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:8.0.128-1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:9.0.118-1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "dotnet10.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.0.109-1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:8.0.128-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:9.0.118-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "dotnet10.0",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.0.109-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:8.0.128-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:8.0.128-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:9.0.118-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "dotnet9-0-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9.0.117-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "dotnet10-0-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "10.0.109-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "dotnet8-0-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8.0.128-1.hum1",
"versionType": "rpm"
}
]
}
],
"datePublic": "2026-06-09T17:05:29.575Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition"
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T00:52:29.949Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"name": "RHBZ#2487224",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28007"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28009"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25115"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25111"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25112"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25114"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25110"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25113"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28227"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28011"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25222"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25220"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25221"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26638"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17527"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:28007: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:28009: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:25115: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:25111: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:25112: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:25114: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:25110: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:25113: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:28227: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:28011: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:28051: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:25222: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25220: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25221: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26638: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:26994: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:17527: Red Hat Hardened Images"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-09T18:07:51.180Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-09T17:05:29.575Z",
"value": "Made public."
}
],
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"workarounds": [
{
"lang": "en",
"value": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": ".NET 10.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.9",
"status": "affected",
"version": "10.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "8.0.28",
"status": "affected",
"version": "8.0.0",
"versionType": "custom"
}
]
},
{
"product": ".NET 9.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "9.0.17",
"status": "affected",
"version": "9.0.0",
"versionType": "custom"
}
]
},
{
"product": "ASP.NET Core 10.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "10.0.9",
"status": "affected",
"version": "10.0",
"versionType": "custom"
}
]
},
{
"product": "ASP.NET Core 8.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "8.0.28",
"status": "affected",
"version": "8.0",
"versionType": "custom"
}
]
},
{
"product": "ASP.NET Core 9.0",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "9.0.17",
"status": "affected",
"version": "9.0",
"versionType": "custom"
}
]
},
{
"product": "Microsoft Visual Studio 2026 version 18.6",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "18.6.3",
"status": "affected",
"version": "18.6.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.6.3",
"versionStartIncluding": "18.6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.9",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.9",
"versionStartIncluding": "10.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.0.28",
"versionStartIncluding": "8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.0.28",
"versionStartIncluding": "8.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.0.17",
"versionStartIncluding": "9.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.0.17",
"versionStartIncluding": "9.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-06-09T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400: Uncontrolled Resource Consumption",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T22:43:51.300Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "ASP.NET Core Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
}
],
"title": "ASP.NET Core Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-45591",
"datePublished": "2026-06-09T17:05:29.575Z",
"dateReserved": "2026-05-12T19:55:45.730Z",
"dateUpdated": "2026-08-25T22:43:51.300Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-45591",
"date": "2026-09-10",
"epss": "0.02481",
"percentile": "0.83627"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-45591\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-06-09T17:17:26.933\",\"lastModified\":\"2026-07-23T08:10:00.137\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.\"},{\"lang\":\"es\",\"value\":\"Consumo descontrolado de recursos en ASP.NET Core permite a un atacante no autorizado denegar el servicio a trav\u00e9s de una red.\"}],\"affected\":[{\"source\":\"secure@microsoft.com\",\"affectedData\":[{\"vendor\":\"Microsoft\",\"product\":\".NET 10.0\",\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.9\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\".NET 8.0\",\"versions\":[{\"version\":\"8.0.0\",\"lessThan\":\"8.0.28\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\".NET 9.0\",\"versions\":[{\"version\":\"9.0.0\",\"lessThan\":\"9.0.17\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"ASP.NET Core 10.0\",\"versions\":[{\"version\":\"10.0\",\"lessThan\":\"10.0.9\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"ASP.NET Core 8.0\",\"versions\":[{\"version\":\"8.0\",\"lessThan\":\"8.0.28\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"ASP.NET Core 9.0\",\"versions\":[{\"version\":\"9.0\",\"lessThan\":\"9.0.17\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Visual Studio 2026 version 18.6\",\"versions\":[{\"version\":\"18.6.0\",\"lessThan\":\"18.6.3\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:8.0.128-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:9.0.118-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet10.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:10.0.109-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:8.0.128-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:9.0.118-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:8.0.128-1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:9.0.118-1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet10.0\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:10.0.109-1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:8.0.128-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:9.0.118-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet10.0\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:10.0.109-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:8.0.128-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:8.0.128-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:9.0.118-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9-0-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"9.0.117-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet10-0-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"10.0.109-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8-0-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"8.0.128-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-10T13:47:51.768280Z\",\"id\":\"CVE-2026-45591\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndExcluding\":\"8.0.28\",\"matchCriteriaId\":\"2E71C9A3-61A7-4494-B55A-6A420C236CA0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.0.0\",\"versionEndExcluding\":\"9.0.17\",\"matchCriteriaId\":\"EA6B14D5-DA50-4679-A734-A427DA977254\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.0.9\",\"matchCriteriaId\":\"7593F5CA-BDB0-46EC-A91F-082098558AD3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"18.6.0\",\"versionEndExcluding\":\"18.6.3\",\"matchCriteriaId\":\"F6690590-418C-4B8A-95A6-932A1EB9F0D0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndExcluding\":\"8.0.28\",\"matchCriteriaId\":\"FEA10A10-D6B6-47D8-8F84-6923185D52B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.0.0\",\"versionEndExcluding\":\"9.0.17\",\"matchCriteriaId\":\"6291B6CC-A6A1-4136-924F-F482B4C76D3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.0.9\",\"matchCriteriaId\":\"F2A53859-6BAF-4B73-845B-D5822D9D3C6A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"387021A0-AF36-463C-A605-32EA7DAC172E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17527\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25110\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25111\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25112\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25113\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25114\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25115\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25220\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25221\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25222\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26638\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26994\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28007\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28009\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28011\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28227\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-45591\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2487224\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-06-30T03:46:10+00:00",
"cve": "CVE-2026-45591",
"id": "CVE-2026-45591",
"initial_release_date": "2026-06-09T17:05:29.575000+00:00",
"product_status:fixed": "1441",
"product_status:known_not_affected": "2",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:8.0.128-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:9.0.118-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.0.109-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet10.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:8.0.128-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:9.0.118-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:8.0.128-1.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:9.0.118-1.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.0.109-1.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet10.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:8.0.128-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:9.0.118-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.0.109-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet10.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:8.0.128-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:8.0.128-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:9.0.118-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"9.0.117-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet9-0-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"10.0.109-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet10-0-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8.0.128-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"dotnet8-0-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-09T18:07:51.180Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-09T17:05:29.575Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:28007: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28009: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25115: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25111: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25112: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25114: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25110: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25113: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28227: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28011: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28051: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25222: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25220: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25221: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26638: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26994: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17527: Red Hat Hardened Images\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-09T17:05:29.575Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-45591\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2487224\", \"name\": \"RHBZ#2487224\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28007\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25115\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25111\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25112\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25114\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25110\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25113\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28227\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28011\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25222\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25220\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25221\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26638\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26994\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17527\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-15T00:52:29.949Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-45591\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-10T13:47:51.768280Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-10T13:47:55.406Z\"}}], \"cna\": {\"title\": \"ASP.NET Core Denial of Service Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \".NET 10.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.9\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 8.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0.0\", \"lessThan\": \"8.0.28\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 9.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0.0\", \"lessThan\": \"9.0.17\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"ASP.NET Core 10.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0\", \"lessThan\": \"10.0.9\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"ASP.NET Core 8.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0\", \"lessThan\": \"8.0.28\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"ASP.NET Core 9.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.0\", \"lessThan\": \"9.0.17\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2026 version 18.6\", \"versions\": [{\"status\": \"affected\", \"version\": \"18.6.0\", \"lessThan\": \"18.6.3\", \"versionType\": \"custom\"}]}], \"datePublic\": \"2026-06-09T14:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591\", \"name\": \"ASP.NET Core Denial of Service Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-400\", \"description\": \"CWE-400: Uncontrolled Resource Consumption\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"18.6.3\", \"versionStartIncluding\": \"18.6.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.9\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.9\", \"versionStartIncluding\": \"10.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"8.0.28\", \"versionStartIncluding\": \"8.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"8.0.28\", \"versionStartIncluding\": \"8.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"9.0.17\", \"versionStartIncluding\": \"9.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"9.0.17\", \"versionStartIncluding\": \"9.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-08-25T22:43:51.300Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-45591\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-25T22:43:51.300Z\", \"dateReserved\": \"2026-05-12T19:55:45.730Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2026-06-09T17:05:29.575Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:26994
Vulnerability from csaf_redhat - Published: 2026-06-18 05:28 - Updated: 2026-09-10 21:49Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
dotnet8.0:
* aspnetcore-runtime-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* aspnetcore-runtime-dbg-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* aspnetcore-targeting-pack-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* dotnet-apphost-pack-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* dotnet-hostfxr-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* dotnet-runtime-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* dotnet-runtime-dbg-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* dotnet-sdk-8.0-8.0.128-1.hum1 (aarch64, x86_64)
* dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.hum1 (aarch64, x86_64)
* dotnet-sdk-dbg-8.0-8.0.128-1.hum1 (aarch64, x86_64)
* dotnet-targeting-pack-8.0-8.0.28-1.hum1 (aarch64, x86_64)
* dotnet-templates-8.0-8.0.128-1.hum1 (aarch64, x86_64)
* dotnet8.0-8.0.128-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.
6.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in Engine.IO. When Engine.IO servers have WebTransport enabled, a remote attacker can craft a session ID to resolve an inherited property of the clients object during WebTransport upgrade handling. This can lead to a TypeError, resulting in a denial of service (DoS) for the server. This vulnerability impacts the availability of the service.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. When merge keys are enabled, a remote attacker could exploit this vulnerability by crafting a YAML document where a chain of mappings uses merge keys, each merging the previous one. This can lead to a significant increase in CPU time required to parse the document, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML (YAML Ain't Markup Language) parser. An attacker could exploit this by providing a specially crafted YAML ordered-map document. This could lead to excessive CPU consumption, resulting in a denial of service (DoS) for applications processing the malicious YAML input.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
47 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ndotnet8.0:\n * aspnetcore-runtime-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * aspnetcore-runtime-dbg-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * aspnetcore-targeting-pack-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * dotnet-apphost-pack-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * dotnet-hostfxr-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * dotnet-runtime-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * dotnet-runtime-dbg-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-8.0-8.0.128-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-dbg-8.0-8.0.128-1.hum1 (aarch64, x86_64)\n * dotnet-targeting-pack-8.0-8.0.28-1.hum1 (aarch64, x86_64)\n * dotnet-templates-8.0-8.0.128-1.hum1 (aarch64, x86_64)\n * dotnet8.0-8.0.128-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:26994",
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45591",
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45491",
"url": "https://access.redhat.com/security/cve/CVE-2026-45491"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59870",
"url": "https://access.redhat.com/security/cve/CVE-2026-59870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59868",
"url": "https://access.redhat.com/security/cve/CVE-2026-59868"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59724",
"url": "https://access.redhat.com/security/cve/CVE-2026-59724"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26994.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-09-10T21:49:41+00:00",
"generator": {
"date": "2026-09-10T21:49:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.18"
}
},
"id": "RHSA-2026:26994",
"initial_release_date": "2026-06-18T05:28:56+00:00",
"revision_history": [
{
"date": "2026-06-18T05:28:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-10T21:49:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8-0-main@aarch64",
"product": {
"name": "dotnet8-0-main@aarch64",
"product_id": "dotnet8-0-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8-0-main@x86_64",
"product": {
"name": "dotnet8-0-main@x86_64",
"product_id": "dotnet8-0-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8-0-main@src",
"product": {
"name": "dotnet8-0-main@src",
"product_id": "dotnet8-0-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.128-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8-0-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet8-0-main@aarch64"
},
"product_reference": "dotnet8-0-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8-0-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet8-0-main@src"
},
"product_reference": "dotnet8-0-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8-0-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet8-0-main@x86_64"
},
"product_reference": "dotnet8-0-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45491",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-09T18:05:02.406017+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET\u0027s System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local file tampering via link following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects .NET\u0027s TAR archive extraction functionality. Red Hat Product Security has assessed this issue as a Moderate severity vulnerability.\n\nThe flaw occurs in System.Formats.Tar when processing TAR archives containing symbolic links. During extraction, the TarFile.ExtractToDirectory() method may incorrectly follow symlink paths and write files outside the intended extraction directory.\n\nSuccessful exploitation requires a vulnerable application to process a specially crafted TAR archive. An attacker could use this behavior to create or overwrite files in locations accessible to the extracting process, potentially affecting system or application integrity.\n\nThe vulnerability is a symlink path traversal issue that results in unauthorized file modification outside the designated extraction directory. The primary security impact is integrity compromise through arbitrary file writes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45491"
},
{
"category": "external",
"summary": "RHBZ#2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491"
}
],
"release_date": "2026-06-09T17:04:44.457000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-18T05:28:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local file tampering via link following vulnerability"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T18:07:51.180043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects the MessagePack hub protocol implementation used by ASP.NET Core SignalR and Blazor Server. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs when processing deeply nested MessagePack arrays supplied by a remote attacker. Insufficient validation of message nesting depth may cause excessive recursion and trigger a stack overflow condition during message processing.\n\nSuccessful exploitation could allow an unauthenticated remote attacker to cause the affected application or service to terminate unexpectedly, resulting in a denial of service condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"category": "external",
"summary": "RHBZ#2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
}
],
"release_date": "2026-06-09T17:05:29.575000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-18T05:28:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-18T05:28:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-59724",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-07-08T16:01:58.067396+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498128"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Engine.IO. When Engine.IO servers have WebTransport enabled, a remote attacker can craft a session ID to resolve an inherited property of the clients object during WebTransport upgrade handling. This can lead to a TypeError, resulting in a denial of service (DoS) for the server. This vulnerability impacts the availability of the service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "engine.io: Engine.IO: Denial of Service via crafted WebTransport session ID",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been rated as Important. When Engine.IO servers have WebTransport enabled, a remote attacker can trigger a denial of service. This occurs by sending a crafted session ID that resolves an inherited property during WebTransport upgrade handling, leading to a TypeError and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59724"
},
{
"category": "external",
"summary": "RHBZ#2498128",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498128"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59724"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59724",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59724"
},
{
"category": "external",
"summary": "https://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c",
"url": "https://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c"
},
{
"category": "external",
"summary": "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7",
"url": "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7"
},
{
"category": "external",
"summary": "https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3",
"url": "https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3"
}
],
"release_date": "2026-07-08T15:35:39.813000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-18T05:28:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "engine.io: Engine.IO: Denial of Service via crafted WebTransport session ID"
},
{
"cve": "CVE-2026-59868",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-07-08T16:01:01.825253+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498114"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. When merge keys are enabled, a remote attacker could exploit this vulnerability by crafting a YAML document where a chain of mappings uses merge keys, each merging the previous one. This can lead to a significant increase in CPU time required to parse the document, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via quadratic CPU time parsing with merge keys",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "js-yaml versions 5.0.0 through 5.1.x are vulnerable to a denial of service. When merge keys (\u0027\u003c\u003c\u0027) are enabled during YAML parsing, js-yaml re-merges the accumulated mapping into each subsequent mapping in a chain. A document consisting of a linear chain of mappings that each merge the previous one causes quadratic (O(n^2)) CPU consumption relative to input size, even though the document size itself grows only linearly. This can be triggered via yaml.load() on untrusted YAML input that uses merge keys. Fixed in js-yaml 5.2.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59868"
},
{
"category": "external",
"summary": "RHBZ#2498114",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498114"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59868",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59868"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/3105455b81dee69e0fd36e09ac0b2ccfdb54adc1",
"url": "https://github.com/nodeca/js-yaml/commit/3105455b81dee69e0fd36e09ac0b2ccfdb54adc1"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/5.2.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/5.2.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-g796-fgmg-93mv",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-g796-fgmg-93mv"
}
],
"release_date": "2026-07-08T15:18:19.422000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-18T05:28:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
},
{
"category": "workaround",
"details": "Upgrade to js-yaml 5.2.0 or later. Where an immediate upgrade is not possible, avoid parsing untrusted YAML documents that use merge keys (\u0027\u003c\u003c\u0027), or apply size and time limits when parsing untrusted YAML input.",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via quadratic CPU time parsing with merge keys"
},
{
"cve": "CVE-2026-59870",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-08T16:02:04.944023+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML (YAML Ain\u0027t Markup Language) parser. An attacker could exploit this by providing a specially crafted YAML ordered-map document. This could lead to excessive CPU consumption, resulting in a denial of service (DoS) for applications processing the malicious YAML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML ordered-map document",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "js-yaml versions 5.0.0 through 5.2.0 are vulnerable to a denial of service via the omapTag.addItem() O(n^2) duplicate-key scan when parsing crafted YAML ordered-map documents with the YAML11_SCHEMA. This affects yaml.load() calls using that schema. Fixed in 5.2.1.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59870"
},
{
"category": "external",
"summary": "RHBZ#2498130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59870"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/39f3211a2f01b3c6982710cf21434ab7060acefe",
"url": "https://github.com/nodeca/js-yaml/commit/39f3211a2f01b3c6982710cf21434ab7060acefe"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/5.2.1",
"url": "https://github.com/nodeca/js-yaml/releases/tag/5.2.1"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-724g-mxrg-4qvm",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-724g-mxrg-4qvm"
}
],
"release_date": "2026-07-08T15:13:20.308000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-18T05:28:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
},
{
"category": "workaround",
"details": "Avoid using the YAML11_SCHEMA when parsing untrusted YAML input, or upgrade to js-yaml 5.2.1 or later. Applications using the default schema (CORE_SCHEMA) are not affected.",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML ordered-map document"
}
]
}
RHSA-2026:28007
Vulnerability from csaf_redhat - Published: 2026-06-22 17:21 - Updated: 2026-07-01 21:04Summary
Red Hat Security Advisory: .NET 8.0 security update
Severity
Important
Notes
Topic: An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.
Security Fix(es):
* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.
6.2 (Medium)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition
7.5 (High)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.\n\nSecurity Fix(es):\n\n* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)\n\n* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28007",
"url": "https://access.redhat.com/errata/RHSA-2026:28007"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28007.json"
}
],
"title": "Red Hat Security Advisory: .NET 8.0 security update",
"tracking": {
"current_release_date": "2026-07-01T21:04:38+00:00",
"generator": {
"date": "2026-07-01T21:04:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:28007",
"initial_release_date": "2026-06-22T17:21:23+00:00",
"revision_history": [
{
"date": "2026-06-22T17:21:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T17:21:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:04:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8.0-0:8.0.128-1.el10_0.src",
"product": {
"name": "dotnet8.0-0:8.0.128-1.el10_0.src",
"product_id": "dotnet8.0-0:8.0.128-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.128-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-0:8.0.128-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src"
},
"product_reference": "dotnet8.0-0:8.0.128-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45491",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-09T18:05:02.406017+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET\u0027s System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local file tampering via link following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects .NET\u0027s TAR archive extraction functionality. Red Hat Product Security has assessed this issue as a Moderate severity vulnerability.\n\nThe flaw occurs in System.Formats.Tar when processing TAR archives containing symbolic links. During extraction, the TarFile.ExtractToDirectory() method may incorrectly follow symlink paths and write files outside the intended extraction directory.\n\nSuccessful exploitation requires a vulnerable application to process a specially crafted TAR archive. An attacker could use this behavior to create or overwrite files in locations accessible to the extracting process, potentially affecting system or application integrity.\n\nThe vulnerability is a symlink path traversal issue that results in unauthorized file modification outside the designated extraction directory. The primary security impact is integrity compromise through arbitrary file writes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45491"
},
{
"category": "external",
"summary": "RHBZ#2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491"
}
],
"release_date": "2026-06-09T17:04:44.457000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T17:21:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28007"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local file tampering via link following vulnerability"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T18:07:51.180043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects the MessagePack hub protocol implementation used by ASP.NET Core SignalR and Blazor Server. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs when processing deeply nested MessagePack arrays supplied by a remote attacker. Insufficient validation of message nesting depth may cause excessive recursion and trigger a stack overflow condition during message processing.\n\nSuccessful exploitation could allow an unauthenticated remote attacker to cause the affected application or service to terminate unexpectedly, resulting in a denial of service condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"category": "external",
"summary": "RHBZ#2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
}
],
"release_date": "2026-06-09T17:05:29.575000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T17:21:23+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28007"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-8.0-0:8.0.28-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-8.0-0:8.0.128-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet8.0-0:8.0.128-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet8.0-debugsource-0:8.0.128-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption"
}
]
}
RHSA-2026:28009
Vulnerability from csaf_redhat - Published: 2026-06-22 17:32 - Updated: 2026-07-01 21:04Summary
Red Hat Security Advisory: .NET 9.0 security update
Severity
Important
Notes
Topic: An update for .NET 9.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.
Security Fix(es):
* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.
6.2 (Medium)
Affected products
Fixed
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition
7.5 (High)
Affected products
Fixed
111 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 9.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.\n\nSecurity Fix(es):\n\n* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)\n\n* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28009",
"url": "https://access.redhat.com/errata/RHSA-2026:28009"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28009.json"
}
],
"title": "Red Hat Security Advisory: .NET 9.0 security update",
"tracking": {
"current_release_date": "2026-07-01T21:04:38+00:00",
"generator": {
"date": "2026-07-01T21:04:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:28009",
"initial_release_date": "2026-06-22T17:32:58+00:00",
"revision_history": [
{
"date": "2026-06-22T17:32:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T17:32:58+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:04:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-host-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-host-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.118-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-host-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-host-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-host-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-host-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.118-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9.0-0:9.0.118-1.el10_0.src",
"product": {
"name": "dotnet9.0-0:9.0.118-1.el10_0.src",
"product_id": "dotnet9.0-0:9.0.118-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0@9.0.118-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-host-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-host-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-host-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-0:9.0.118-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src"
},
"product_reference": "dotnet9.0-0:9.0.118-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45491",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-09T18:05:02.406017+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET\u0027s System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local file tampering via link following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects .NET\u0027s TAR archive extraction functionality. Red Hat Product Security has assessed this issue as a Moderate severity vulnerability.\n\nThe flaw occurs in System.Formats.Tar when processing TAR archives containing symbolic links. During extraction, the TarFile.ExtractToDirectory() method may incorrectly follow symlink paths and write files outside the intended extraction directory.\n\nSuccessful exploitation requires a vulnerable application to process a specially crafted TAR archive. An attacker could use this behavior to create or overwrite files in locations accessible to the extracting process, potentially affecting system or application integrity.\n\nThe vulnerability is a symlink path traversal issue that results in unauthorized file modification outside the designated extraction directory. The primary security impact is integrity compromise through arbitrary file writes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45491"
},
{
"category": "external",
"summary": "RHBZ#2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491"
}
],
"release_date": "2026-06-09T17:04:44.457000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T17:32:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28009"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local file tampering via link following vulnerability"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T18:07:51.180043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects the MessagePack hub protocol implementation used by ASP.NET Core SignalR and Blazor Server. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs when processing deeply nested MessagePack arrays supplied by a remote attacker. Insufficient validation of message nesting depth may cause excessive recursion and trigger a stack overflow condition during message processing.\n\nSuccessful exploitation could allow an unauthenticated remote attacker to cause the affected application or service to terminate unexpectedly, resulting in a denial of service condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"category": "external",
"summary": "RHBZ#2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
}
],
"release_date": "2026-06-09T17:05:29.575000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T17:32:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28009"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-runtime-dbg-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-sdk-dbg-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-targeting-pack-9.0-0:9.0.17-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet-templates-9.0-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:dotnet9.0-0:9.0.118-1.el10_0.src",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:netstandard-targeting-pack-2.1-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-host-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el10_0.x86_64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.aarch64",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.ppc64le",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.s390x",
"CRB-10.0.Z.E2S:dotnet9.0-debugsource-0:9.0.118-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption"
}
]
}
RHSA-2026:28011
Vulnerability from csaf_redhat - Published: 2026-06-22 18:28 - Updated: 2026-07-01 21:04Summary
Red Hat Security Advisory: .NET 8.0 security update
Severity
Important
Notes
Topic: An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.
Security Fix(es):
* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.
6.2 (Medium)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition
7.5 (High)
Affected products
Fixed
97 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.\n\nSecurity Fix(es):\n\n* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)\n\n* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28011",
"url": "https://access.redhat.com/errata/RHSA-2026:28011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28011.json"
}
],
"title": "Red Hat Security Advisory: .NET 8.0 security update",
"tracking": {
"current_release_date": "2026-07-01T21:04:38+00:00",
"generator": {
"date": "2026-07-01T21:04:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:28011",
"initial_release_date": "2026-06-22T18:28:08+00:00",
"revision_history": [
{
"date": "2026-06-22T18:28:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T18:28:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:04:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product": {
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"product_id": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.128-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8.0-0:8.0.128-1.el9_6.src",
"product": {
"name": "dotnet8.0-0:8.0.128-1.el9_6.src",
"product_id": "dotnet8.0-0:8.0.128-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.128-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-0:8.0.128-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src"
},
"product_reference": "dotnet8.0-0:8.0.128-1.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45491",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-09T18:05:02.406017+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET\u0027s System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local file tampering via link following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects .NET\u0027s TAR archive extraction functionality. Red Hat Product Security has assessed this issue as a Moderate severity vulnerability.\n\nThe flaw occurs in System.Formats.Tar when processing TAR archives containing symbolic links. During extraction, the TarFile.ExtractToDirectory() method may incorrectly follow symlink paths and write files outside the intended extraction directory.\n\nSuccessful exploitation requires a vulnerable application to process a specially crafted TAR archive. An attacker could use this behavior to create or overwrite files in locations accessible to the extracting process, potentially affecting system or application integrity.\n\nThe vulnerability is a symlink path traversal issue that results in unauthorized file modification outside the designated extraction directory. The primary security impact is integrity compromise through arbitrary file writes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45491"
},
{
"category": "external",
"summary": "RHBZ#2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491"
}
],
"release_date": "2026-06-09T17:04:44.457000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T18:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28011"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local file tampering via link following vulnerability"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T18:07:51.180043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects the MessagePack hub protocol implementation used by ASP.NET Core SignalR and Blazor Server. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs when processing deeply nested MessagePack arrays supplied by a remote attacker. Insufficient validation of message nesting depth may cause excessive recursion and trigger a stack overflow condition during message processing.\n\nSuccessful exploitation could allow an unauthenticated remote attacker to cause the affected application or service to terminate unexpectedly, resulting in a denial of service condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"category": "external",
"summary": "RHBZ#2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
}
],
"release_date": "2026-06-09T17:05:29.575000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T18:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28011"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-8.0-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-0:8.0.128-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debuginfo-0:8.0.128-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet8.0-debugsource-0:8.0.128-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption"
}
]
}
RHSA-2026:28051
Vulnerability from csaf_redhat - Published: 2026-06-29 18:18 - Updated: 2026-07-01 21:04Summary
Red Hat Security Advisory: .NET 9.0 security update
Severity
Important
Notes
Topic: An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.
Security Fix(es):
* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.
6.2 (Medium)
Affected products
Fixed
119 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition
7.5 (High)
Affected products
Fixed
119 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.\n\nSecurity Fix(es):\n\n* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)\n\n* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28051",
"url": "https://access.redhat.com/errata/RHSA-2026:28051"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28051.json"
}
],
"title": "Red Hat Security Advisory: .NET 9.0 security update",
"tracking": {
"current_release_date": "2026-07-01T21:04:38+00:00",
"generator": {
"date": "2026-07-01T21:04:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:28051",
"initial_release_date": "2026-06-29T18:18:25+00:00",
"revision_history": [
{
"date": "2026-06-29T18:18:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-29T18:18:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:04:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product": {
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-host-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-host-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.118-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"product_id": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.118-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-host-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-host-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"product_id": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.118-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-host-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-host-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.17-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.118-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.118-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9.0-0:9.0.118-1.el9_6.src",
"product": {
"name": "dotnet9.0-0:9.0.118-1.el9_6.src",
"product_id": "dotnet9.0-0:9.0.118-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0@9.0.118-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-host-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-host-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-host-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-0:9.0.118-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src"
},
"product_reference": "dotnet9.0-0:9.0.118-1.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45491",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-09T18:05:02.406017+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET\u0027s System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local file tampering via link following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects .NET\u0027s TAR archive extraction functionality. Red Hat Product Security has assessed this issue as a Moderate severity vulnerability.\n\nThe flaw occurs in System.Formats.Tar when processing TAR archives containing symbolic links. During extraction, the TarFile.ExtractToDirectory() method may incorrectly follow symlink paths and write files outside the intended extraction directory.\n\nSuccessful exploitation requires a vulnerable application to process a specially crafted TAR archive. An attacker could use this behavior to create or overwrite files in locations accessible to the extracting process, potentially affecting system or application integrity.\n\nThe vulnerability is a symlink path traversal issue that results in unauthorized file modification outside the designated extraction directory. The primary security impact is integrity compromise through arbitrary file writes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45491"
},
{
"category": "external",
"summary": "RHBZ#2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491"
}
],
"release_date": "2026-06-09T17:04:44.457000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T18:18:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28051"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local file tampering via link following vulnerability"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T18:07:51.180043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects the MessagePack hub protocol implementation used by ASP.NET Core SignalR and Blazor Server. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs when processing deeply nested MessagePack arrays supplied by a remote attacker. Insufficient validation of message nesting depth may cause excessive recursion and trigger a stack overflow condition during message processing.\n\nSuccessful exploitation could allow an unauthenticated remote attacker to cause the affected application or service to terminate unexpectedly, resulting in a denial of service condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"category": "external",
"summary": "RHBZ#2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
}
],
"release_date": "2026-06-09T17:05:29.575000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T18:18:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28051"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.17-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.118-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.17-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.118-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.118-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption"
}
]
}
RHSA-2026:28227
Vulnerability from csaf_redhat - Published: 2026-06-23 18:48 - Updated: 2026-07-01 21:04Summary
Red Hat Security Advisory: .NET 8.0 security update
Severity
Important
Notes
Topic: An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.
Security Fix(es):
* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.
6.2 (Medium)
Affected products
Fixed
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition
7.5 (High)
Affected products
Fixed
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.\n\nSecurity Fix(es):\n\n* dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)\n\n* dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28227",
"url": "https://access.redhat.com/errata/RHSA-2026:28227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28227.json"
}
],
"title": "Red Hat Security Advisory: .NET 8.0 security update",
"tracking": {
"current_release_date": "2026-07-01T21:04:38+00:00",
"generator": {
"date": "2026-07-01T21:04:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:28227",
"initial_release_date": "2026-06-23T18:48:59+00:00",
"revision_history": [
{
"date": "2026-06-23T18:48:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-23T18:48:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:04:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-host-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-host-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"product_id": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@8.0.128-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"product": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"product_id": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@8.0.128-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-host-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-host-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"product": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"product_id": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@8.0.128-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-host-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-host-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"product": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"product_id": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0@8.0.128-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"product": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"product_id": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.128-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"product": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"product_id": "dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-8.0@8.0.128-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64",
"product_id": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@8.0.128-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"product": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"product_id": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debugsource@8.0.128-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-8.0-debuginfo@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-8.0-debuginfo@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_id": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-8.0-debuginfo@8.0.28-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"product": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"product_id": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-8.0-debuginfo@8.0.128-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"product": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"product_id": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0-debuginfo@8.0.128-1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8.0-0:8.0.128-1.el9_4.src",
"product": {
"name": "dotnet8.0-0:8.0.128-1.el9_4.src",
"product_id": "dotnet8.0-0:8.0.128-1.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.128-1.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-host-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-host-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-host-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64"
},
"product_reference": "dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64"
},
"product_reference": "dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64"
},
"product_reference": "dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64"
},
"product_reference": "dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64"
},
"product_reference": "dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-0:8.0.128-1.el9_4.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src"
},
"product_reference": "dotnet8.0-0:8.0.128-1.el9_4.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64"
},
"product_reference": "dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64"
},
"product_reference": "dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le"
},
"product_reference": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x"
},
"product_reference": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45491",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-06-09T18:05:02.406017+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET\u0027s System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory() method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issue to create or overwrite files in locations accessible to the extracting process, potentially leading to unauthorized file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local file tampering via link following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects .NET\u0027s TAR archive extraction functionality. Red Hat Product Security has assessed this issue as a Moderate severity vulnerability.\n\nThe flaw occurs in System.Formats.Tar when processing TAR archives containing symbolic links. During extraction, the TarFile.ExtractToDirectory() method may incorrectly follow symlink paths and write files outside the intended extraction directory.\n\nSuccessful exploitation requires a vulnerable application to process a specially crafted TAR archive. An attacker could use this behavior to create or overwrite files in locations accessible to the extracting process, potentially affecting system or application integrity.\n\nThe vulnerability is a symlink path traversal issue that results in unauthorized file modification outside the designated extraction directory. The primary security impact is integrity compromise through arbitrary file writes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45491"
},
{
"category": "external",
"summary": "RHBZ#2487164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45491"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491"
}
],
"release_date": "2026-06-09T17:04:44.457000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T18:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28227"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local file tampering via link following vulnerability"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T18:07:51.180043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects the MessagePack hub protocol implementation used by ASP.NET Core SignalR and Blazor Server. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nThe flaw occurs when processing deeply nested MessagePack arrays supplied by a remote attacker. Insufficient validation of message nesting depth may cause excessive recursion and trigger a stack overflow condition during message processing.\n\nSuccessful exploitation could allow an unauthenticated remote attacker to cause the affected application or service to terminate unexpectedly, resulting in a denial of service condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45591"
},
{
"category": "external",
"summary": "RHBZ#2487224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45591"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
}
],
"release_date": "2026-06-09T17:05:29.575000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T18:48:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28227"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:aspnetcore-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-apphost-pack-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-host-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-hostfxr-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-8.0-debuginfo-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-runtime-dbg-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-sdk-dbg-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-targeting-pack-8.0-0:8.0.28-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet-templates-8.0-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-0:8.0.128-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debuginfo-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:dotnet8.0-debugsource-0:8.0.128-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:netstandard-targeting-pack-2.1-0:8.0.128-1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption"
}
]
}
ubuntu-cve-2026-45591
Vulnerability from osv_ubuntu
Published
2026-06-09 17:17
Modified
2026-06-30 16:21
Summary
Details
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Severity
7.5 (High)
7.5 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-apphost-pack-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-host",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-hostfxr-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-6.0-source-built-artifacts",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-targeting-pack-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-templates-6.0",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet6",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1",
"binary_version": "6.0.136-0ubuntu1~22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "dotnet6",
"purl": "pkg:deb/ubuntu/dotnet6@6.0.136-0ubuntu1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.0.108-0ubuntu1~22.04.1",
"6.0.109-0ubuntu1~22.04.1",
"6.0.110-0ubuntu1~22.04.1",
"6.0.111-0ubuntu1~22.04.1",
"6.0.113-0ubuntu1~22.04.1",
"6.0.116-0ubuntu1~22.04.1",
"6.0.118-0ubuntu1~22.04.1",
"6.0.119-0ubuntu1~22.04.1",
"6.0.120-0ubuntu1~22.04.1",
"6.0.121-0ubuntu1~22.04.1",
"6.0.122-0ubuntu1~22.04.1",
"6.0.123-0ubuntu1~22.04.1",
"6.0.124-0ubuntu1~22.04.1",
"6.0.125-0ubuntu1~22.04.1",
"6.0.126-0ubuntu1~22.04.1",
"6.0.127-0ubuntu1~22.04.1",
"6.0.128-0ubuntu1~22.04.2",
"6.0.132-0ubuntu1~22.04.1",
"6.0.133-0ubuntu1~22.04.1",
"6.0.135-0ubuntu1~22.04.1",
"6.0.136-0ubuntu1~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "aspnetcore-runtime-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-apphost-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-host-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-hostfxr-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-7.0-source-built-artifacts",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-targeting-pack-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-templates-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet7",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-7.0",
"binary_version": "7.0.119-0ubuntu1~22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "dotnet7",
"purl": "pkg:deb/ubuntu/dotnet7@7.0.119-0ubuntu1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.0.105-0ubuntu1~22.04.1",
"7.0.107-0ubuntu1~22.04.1",
"7.0.108-0ubuntu1~22.04.1",
"7.0.109-0ubuntu1~22.04.1",
"7.0.110-0ubuntu1~22.04.1",
"7.0.111-0ubuntu1~22.04.1",
"7.0.112-0ubuntu1~22.04.1",
"7.0.113-0ubuntu1~22.04.1",
"7.0.114-0ubuntu1~22.04.1",
"7.0.115-0ubuntu1~22.04.1",
"7.0.116-0ubuntu1~22.04.1",
"7.0.117-0ubuntu1~22.04.1",
"7.0.117-0ubuntu1~22.04.2",
"7.0.119-0ubuntu1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "aspnetcore-runtime-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-apphost-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-host-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-hostfxr-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-8.0",
"binary_version": "8.0.128-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-8.0-source-built-artifacts",
"binary_version": "8.0.128-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-8.0",
"binary_version": "8.0.128-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-targeting-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet-templates-8.0",
"binary_version": "8.0.128-0ubuntu1~22.04.1"
},
{
"binary_name": "dotnet8",
"binary_version": "8.0.128-8.0.28-0ubuntu1~22.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-8.0",
"binary_version": "8.0.128-0ubuntu1~22.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "dotnet8",
"purl": "pkg:deb/ubuntu/dotnet8@8.0.128-8.0.28-0ubuntu1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.128-8.0.28-0ubuntu1~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.0.102-8.0.2-0ubuntu1~22.04.1",
"8.0.103-8.0.3-0ubuntu1~22.04.1",
"8.0.103-8.0.3-0ubuntu1~22.04.2",
"8.0.105-8.0.5-0ubuntu1~22.04.1",
"8.0.107-8.0.7-0ubuntu1~22.04.1",
"8.0.108-8.0.8-0ubuntu1~22.04.1",
"8.0.110-8.0.10-0ubuntu1~22.04.1",
"8.0.111-8.0.11-0ubuntu1~22.04.1",
"8.0.112-8.0.12-0ubuntu1~22.04.1",
"8.0.114-8.0.14-0ubuntu1~22.04.1",
"8.0.115-8.0.15-0ubuntu1~22.04.1",
"8.0.116-8.0.16-0ubuntu1~22.04.1",
"8.0.117-8.0.17-0ubuntu1~22.04.1",
"8.0.118-8.0.18-0ubuntu1~22.04.1",
"8.0.119-8.0.19-0ubuntu1~22.04.1",
"8.0.120-8.0.20-0ubuntu1~22.04.1",
"8.0.121-8.0.21-0ubuntu1~22.04.1",
"8.0.122-8.0.22-0ubuntu1~22.04.1",
"8.0.123-8.0.23-0ubuntu1~22.04.1",
"8.0.124-8.0.24-0ubuntu1~22.04.1",
"8.0.125-8.0.25-0ubuntu1~22.04.1",
"8.0.126-8.0.26-0ubuntu1~22.04.1",
"8.0.127-8.0.27-0ubuntu1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "aspnetcore-runtime-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-apphost-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-host-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-hostfxr-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-10.0",
"binary_version": "10.0.109-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-10.0-source-built-artifacts",
"binary_version": "10.0.109-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-aot-10.0",
"binary_version": "10.0.109-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-10.0",
"binary_version": "10.0.109-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-targeting-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-templates-10.0",
"binary_version": "10.0.109-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet10",
"binary_version": "10.0.109-10.0.9-0ubuntu1~24.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "dotnet10",
"purl": "pkg:deb/ubuntu/dotnet10@10.0.109-10.0.9-0ubuntu1~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.109-10.0.9-0ubuntu1~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.100-10.0.0-0ubuntu1~24.04.1",
"10.0.101-10.0.1-0ubuntu1~24.04.2",
"10.0.103-10.0.3-0ubuntu1~24.04.1",
"10.0.104-10.0.4-0ubuntu1~24.04.1",
"10.0.105-10.0.5-0ubuntu1~24.04.1",
"10.0.106-10.0.6-0ubuntu1~24.04.1",
"10.0.107-10.0.7-0ubuntu1~24.04.1",
"10.0.108-10.0.8-0ubuntu1~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "aspnetcore-runtime-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-apphost-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-host-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-hostfxr-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-8.0",
"binary_version": "8.0.128-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-8.0-source-built-artifacts",
"binary_version": "8.0.128-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-8.0",
"binary_version": "8.0.128-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-targeting-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet-templates-8.0",
"binary_version": "8.0.128-0ubuntu1~24.04.1"
},
{
"binary_name": "dotnet8",
"binary_version": "8.0.128-8.0.28-0ubuntu1~24.04.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-8.0",
"binary_version": "8.0.128-0ubuntu1~24.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "dotnet8",
"purl": "pkg:deb/ubuntu/dotnet8@8.0.128-8.0.28-0ubuntu1~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.128-8.0.28-0ubuntu1~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.0.100-8.0.0~rc1-0ubuntu1",
"8.0.100-8.0.0~rc2-0ubuntu1",
"8.0.100-8.0.0~rc2-0ubuntu2",
"8.0.100-8.0.0-0ubuntu1",
"8.0.100-8.0.0-0ubuntu2",
"8.0.101-8.0.1-0ubuntu1",
"8.0.101-8.0.1-0ubuntu2",
"8.0.102-8.0.2-0ubuntu1",
"8.0.103-8.0.3-0ubuntu2",
"8.0.103-8.0.3-0ubuntu3",
"8.0.104-8.0.4-0ubuntu1",
"8.0.105-8.0.5-0ubuntu1~24.04.1",
"8.0.107-8.0.7-0ubuntu1~24.04.1",
"8.0.108-8.0.8-0ubuntu1~24.04.1",
"8.0.108-8.0.8-0ubuntu1~24.04.2",
"8.0.110-8.0.10-0ubuntu1~24.04.1",
"8.0.111-8.0.11-0ubuntu1~24.04.1",
"8.0.112-8.0.12-0ubuntu1~24.04.1",
"8.0.114-8.0.14-0ubuntu1~24.04.1",
"8.0.115-8.0.15-0ubuntu1~24.04.1",
"8.0.116-8.0.16-0ubuntu1~24.04.1",
"8.0.117-8.0.17-0ubuntu1~24.04.1",
"8.0.118-8.0.18-0ubuntu1~24.04.1",
"8.0.119-8.0.19-0ubuntu1~24.04.1",
"8.0.120-8.0.20-0ubuntu1~24.04.1",
"8.0.121-8.0.21-0ubuntu1~24.04.1",
"8.0.122-8.0.22-0ubuntu1~24.04.1",
"8.0.123-8.0.23-0ubuntu1~24.04.1",
"8.0.124-8.0.24-0ubuntu1~24.04.1",
"8.0.125-8.0.25-0ubuntu1~24.04.1",
"8.0.126-8.0.26-0ubuntu1~24.04.1",
"8.0.127-8.0.27-0ubuntu1~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "aspnetcore-runtime-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "aspnetcore-targeting-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-apphost-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-host-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-hostfxr-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-runtime-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-runtime-dbg-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-10.0",
"binary_version": "10.0.109-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-10.0-source-built-artifacts",
"binary_version": "10.0.109-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-aot-10.0",
"binary_version": "10.0.109-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-dbg-10.0",
"binary_version": "10.0.109-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-targeting-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-templates-10.0",
"binary_version": "10.0.109-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet10",
"binary_version": "10.0.109-10.0.9-0ubuntu1~25.10.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "dotnet10",
"purl": "pkg:deb/ubuntu/dotnet10@10.0.109-10.0.9-0ubuntu1~25.10.1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.109-10.0.9-0ubuntu1~25.10.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.100-10.0.0~rc1-0ubuntu1",
"10.0.100-10.0.0~rc2-0ubuntu1~25.10.2",
"10.0.100-10.0.0-0ubuntu1~25.10.1",
"10.0.101-10.0.1-0ubuntu1~25.10.2",
"10.0.103-10.0.3-0ubuntu1~25.10.1",
"10.0.104-10.0.4-0ubuntu1~25.10.1",
"10.0.105-10.0.5-0ubuntu1~25.10.1",
"10.0.106-10.0.6-0ubuntu1~25.10.1",
"10.0.107-10.0.7-0ubuntu1~25.10.1",
"10.0.108-10.0.8-0ubuntu1~25.10.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "aspnetcore-runtime-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "aspnetcore-targeting-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-apphost-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-host-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-hostfxr-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-runtime-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-runtime-dbg-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-8.0",
"binary_version": "8.0.128-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-8.0-source-built-artifacts",
"binary_version": "8.0.128-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-dbg-8.0",
"binary_version": "8.0.128-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-targeting-pack-8.0",
"binary_version": "8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-templates-8.0",
"binary_version": "8.0.128-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet8",
"binary_version": "8.0.128-8.0.28-0ubuntu1~25.10.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-8.0",
"binary_version": "8.0.128-0ubuntu1~25.10.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "dotnet8",
"purl": "pkg:deb/ubuntu/dotnet8@8.0.128-8.0.28-0ubuntu1~25.10.1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.128-8.0.28-0ubuntu1~25.10.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.0.115-8.0.15-0ubuntu1",
"8.0.116-8.0.16-0ubuntu1",
"8.0.117-8.0.17-0ubuntu1",
"8.0.118-8.0.18-0ubuntu1",
"8.0.119-8.0.19-0ubuntu1",
"8.0.120-8.0.20-0ubuntu1",
"8.0.121-8.0.21-0ubuntu1~25.10.1",
"8.0.122-8.0.22-0ubuntu1~25.10.1",
"8.0.123-8.0.23-0ubuntu1~25.10.1",
"8.0.124-8.0.24-0ubuntu1~25.10.1",
"8.0.125-8.0.25-0ubuntu1~25.10.1",
"8.0.126-8.0.26-0ubuntu1~25.10.1",
"8.0.127-8.0.27-0ubuntu1~25.10.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "aspnetcore-runtime-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "aspnetcore-targeting-pack-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-apphost-pack-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-host-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-hostfxr-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-runtime-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-runtime-dbg-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-9.0",
"binary_version": "9.0.118-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-9.0-source-built-artifacts",
"binary_version": "9.0.118-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-aot-9.0",
"binary_version": "9.0.118-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-sdk-dbg-9.0",
"binary_version": "9.0.118-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-targeting-pack-9.0",
"binary_version": "9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet-templates-9.0",
"binary_version": "9.0.118-0ubuntu1~25.10.1"
},
{
"binary_name": "dotnet9",
"binary_version": "9.0.118-9.0.17-0ubuntu1~25.10.1"
},
{
"binary_name": "netstandard-targeting-pack-2.1-9.0",
"binary_version": "9.0.118-0ubuntu1~25.10.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "dotnet9",
"purl": "pkg:deb/ubuntu/dotnet9@9.0.118-9.0.17-0ubuntu1~25.10.1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "9.0.118-9.0.17-0ubuntu1~25.10.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"9.0.105-9.0.4-0ubuntu1",
"9.0.106-9.0.5-0ubuntu1",
"9.0.107-9.0.6-0ubuntu1",
"9.0.108-9.0.7-0ubuntu1",
"9.0.109-9.0.8-0ubuntu1",
"9.0.110-9.0.9-0ubuntu1",
"9.0.111-9.0.10-0ubuntu1~25.10.1",
"9.0.112-9.0.11-0ubuntu1~25.10.1",
"9.0.113-9.0.12-0ubuntu1~25.10.1",
"9.0.114-9.0.13-0ubuntu1~25.10.1",
"9.0.115-9.0.14-0ubuntu1~25.10.1",
"9.0.116-9.0.15-0ubuntu1~25.10.1",
"9.0.117-9.0.16-0ubuntu1~25.10.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "aspnetcore-runtime-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "aspnetcore-runtime-dbg-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "aspnetcore-targeting-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-apphost-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-host-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-hostfxr-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-runtime-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-runtime-dbg-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-10.0",
"binary_version": "10.0.109-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-10.0-source-built-artifacts",
"binary_version": "10.0.109-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-aot-10.0",
"binary_version": "10.0.109-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-sdk-dbg-10.0",
"binary_version": "10.0.109-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-targeting-pack-10.0",
"binary_version": "10.0.9-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet-templates-10.0",
"binary_version": "10.0.109-0ubuntu1~26.04.1"
},
{
"binary_name": "dotnet10",
"binary_version": "10.0.109-10.0.9-0ubuntu1~26.04.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "dotnet10",
"purl": "pkg:deb/ubuntu/dotnet10@10.0.109-10.0.9-0ubuntu1~26.04.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "10.0.109-10.0.9-0ubuntu1~26.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.100-10.0.0~rc1-0ubuntu1",
"10.0.100-10.0.0~rc2-0ubuntu1",
"10.0.100-10.0.0-0ubuntu1",
"10.0.100-10.0.0-0ubuntu2",
"10.0.101-10.0.1-0ubuntu1",
"10.0.101-10.0.1-0ubuntu2",
"10.0.101-10.0.1-0ubuntu3",
"10.0.102-10.0.2-0ubuntu1",
"10.0.103-10.0.3-0ubuntu1",
"10.0.104-10.0.4-0ubuntu1",
"10.0.105-10.0.5-0ubuntu1",
"10.0.107-10.0.7-0ubuntu1~26.04.1",
"10.0.108-10.0.8-0ubuntu1~26.04.1"
]
}
],
"aliases": [],
"details": "Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"id": "UBUNTU-CVE-2026-45591",
"modified": "2026-06-30T16:21:57Z",
"published": "2026-06-09T17:17:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-45591"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45591"
},
{
"type": "REPORT",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"
},
{
"type": "REPORT",
"url": "https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-june-2026-servicing-updates"
},
{
"type": "REPORT",
"url": "https://github.com/dotnet/announcements/issues/405"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8420-1"
}
],
"related": [
"USN-8420-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-45591"
]
}
VDE-2026-088
Vulnerability from csaf_mettlertoledogmbh - Published: 2026-08-20 10:00 - Updated: 2026-09-10 10:00Summary
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
Notes
Summary: The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.
The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25
All other vulnerabilities are to be fixed in the upcoming releases.
Impact: The fixed vulnerabilities remove remote code execution and confidentiality loss issues. The identified medium-severity vulnerabilities may expose the system to risks such as denial of service, authentication or certificate validation bypass, and memory corruption.
Remediation: To address vulnerabilities CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, update LabX Standard versions 21.3.22 - 21.4.23 to LabX Standard v21.4.25 and LabX Enterprise versions 21.3.22 - 21.4.23 to LabX Enterprise v21.4.25.
To address vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, update LabX Standard versions 21.3.22 - 21.4.23 to LabX Standard v21.4.25.
Disclaimer: Your use of the information on this document or materials linked from this document is at your own risk. METTLER TOLEDO makes reasonable efforts to ensure the accuracy of the information but does not grant any warranty, express or implied, including warranties of merchantability or fitness for a particular purpose. To the extent permitted by applicable law, METTLER TOLEDO excludes liability for any loss, claim, expense or damage arising from or related to the statements in this document. METTLER TOLEDO reserves the right to change or update this document at any time.
Impact: The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in; if Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function(). Patched in version 4.18.0.
9.8 (Critical)
9.8 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 | |
|
LabX Enterprise 21.4.25
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
|
LabX Enterprise versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 :path pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the :path omitted the mandatory leading slash (e.g., Service/Method instead of /Service/Method). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official grpc/authz package) evaluated the raw, non-canonical path string, so deny rules defined using canonical paths failed to match the incoming request, allowing it to bypass the policy if a fallback allow rule was present. Exploitable by sending raw HTTP/2 frames with malformed :path headers directly to the gRPC server. Fixed in version 1.79.3.
9.1 (Critical)
9.1 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 | |
|
LabX Enterprise 21.4.25
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
|
LabX Enterprise versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
The ToASCII and ToUnicode functions in Go's golang.org/x/net/idna package incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package: a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com"; if that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permit access to the Unicode name "example.com".
9.6 (Critical)
9.6 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 | |
|
LabX Enterprise 21.4.25
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
|
LabX Enterprise versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
Picomatch is a glob matcher written in JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain patterns using extglob quantifiers such as +() and *(), especially when combined with overlapping alternatives or nested extglobs, are compiled into regular expressions that can exhibit catastrophic backtracking on non-matching input. Applications that allow untrusted users to supply glob patterns passed to picomatch for compilation or matching can suffer excessive CPU consumption and a blocked Node.js event loop, resulting in denial of service. Fixed in picomatch 4.0.4, 3.0.2, and 2.3.2.
7.5 (High)
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 | |
|
LabX Enterprise 21.4.25
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
|
LabX Enterprise versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Enterprise
|
cpe:2.3:a:mettler_toledo:labx_enterprise:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard versions 21.3.22 - 21.4.23
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*
|
vers:intdot/>=21.3.22|<21.4.25 |
Vendor Fix
|
Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. The destination size for Unicode output is computed in a signed int and the calculation overflows when the input reaches around 2^30 characters, causing the size to wrap to zero, a 1-byte allocation, and a character copy that writes several gigabytes past the allocation. Triggering the bug requires an application that calls ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers a custom string type via ASN1_STRING_TABLE_add(), with attacker-controlled input on the order of half a gigabyte or more.
8.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition. Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected; applications using the CMS APIs are not affected.
8.8 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers. An on-path attacker who captures a legitimate AES-GCM AuthEnvelopedData message can re-emit it with the inner cipher OID rewritten to an unauthenticated stream mode (AES-256-OFB) and attacker-chosen IV/ciphertext; the victim's private key still unwraps the genuine content-encryption key, CMS_decrypt() never consults the MAC, and returns success, allowing the attacker to obtain key-equivalent functionality via a decryption oracle. Separately, an attacker can reduce an AEAD tag length to one byte, enabling brute-force integrity bypass of CMS_decrypt().
9.1 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A flaw in GnuTLS DTLS zero-length fragment handling can be exploited to cause a denial of service.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
nghttp2 is an implementation of HTTP/2 in C. Prior to version 1.68.1, the library stops reading incoming data when nghttp2_session_terminate_session or nghttp2_session_terminate_session2 is called, but due to missing internal state validation it continues reading the rest of the data after one of those APIs is called. Receiving a subsequent malformed frame that causes a FRAME_SIZE_ERROR then triggers an assertion failure. No known workarounds are available.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Python-Markdown version 3.8 contains a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown may crash, enabling remote, unauthenticated denial of service in web applications, documentation systems, CI/CD pipelines, and any service that renders untrusted Markdown; it can also lead to information disclosure through the uncaught exception. Fixed in version 3.8.1.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Use-after-free (UAF) was possible in Python's lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the decompression instance is re-used, which can be triggered under memory pressure. The fix cleans up the dangling pointer in this error condition. One-shot helper functions such as lzma.decompress(), bz2.decompress(), gzip.decompress(), and zlib.decompress() are not affected, as they use a new decompressor instance per call.
8.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker-controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or '..' segments, and the secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker-chosen path.
9.1 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Pathological inputs could cause denial of service through consumePhrase when parsing an email address in Go's net/mail package according to RFC 5322.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Go's net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The Dial and LookupPort functions in Go's net package panic on Windows when provided with an input containing a NUL (0) byte.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The ParseAddress function in Go's net/mail package constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.
5.3 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
9.1 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. Due to a logical error in the connection-reuse pool code, a network transfer operation could wrongfully reuse an existing SMB connection to the same server that was using a different 'share' than the new transfer should use, which could in unlucky situations lead to the download of the wrong file or the upload of a file to the wrong place. When this happens, the same credentials are used and the server name is the same.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Using libcurl, when a custom Host: header is first set for an HTTP request and a second request is subsequently done using the same easy handle but without the custom Host: header set, the second request would use stale information and pass on cookies meant for the first host in the second request, leaking them.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.
8.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.
9.1 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against proxyA using Digest auth, a subsequent transfer routed through proxyB erroneously leaks the Proxy-Authorization: header intended solely for proxyA.
9.1 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out-of-bounds read in the LZH decoder. This issue has been fixed in commit 63dbf6b3b9e6e781df1a6a64e609b10e23969681.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.
7.3 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GnuTLS: certificate validation bypass due to improper handling of URI and SRV SANs. Improper handling of certain Subject Alternative Name types can allow a certificate validation bypass under specific conditions.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. In merge_handshake_packet(), incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
7.8 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
An integer overflow vulnerability affecting the pcre2test utility in PCRE2 versions before 10.41. The issue occurs when processing negative repeat values in the pcre2test subject line, which can trigger an integer overflow condition leading to infinite looping and denial of service through resource exhaustion.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression. Exploitation requires an application to take regular expressions as untrusted input.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Mitigation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types, allowing the webbrowser.open() API to have commands injected into the underlying shell.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.
7.8 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. The issue spans multiple ASP.NET Core subsystems in .NET 8.0, .NET 9.0, and .NET 10.0.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
A stack buffer overflow vulnerability was discovered in International Components for Unicode (ICU) affecting the SRBRoot::addTag function when running the genrb binary, where the 'subtag' struct can overflow. If successfully exploited, this can lead to memory corruption and potential local arbitrary code execution.
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Every message encrypted under the same key uses the same effective nonce regardless of the IV supplied by the caller, resulting in (key, nonce) reuse and loss of confidentiality. If the same code path is used to compute the authentication tag, the tag depends only on the (key, IV) pair and not on the plaintext or ciphertext, allowing universal forgery of arbitrary ciphertext from a single captured message.
9.1 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. An integer truncation in OpenSSL's ASN.1 decoder causes the content length of a primitive element to be mishandled, which may crash the application or load adjacent heap memory into the decoded object. Applications passing attacker-supplied data to d2i_X509(), d2i_PKCS7(), or any other d2i_* decoding function are affected.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The kek_unwrap_key() function validates the wrapping cipher's block length before performing an RFC 3211 check-byte test but does not verify the cipher is actually a block cipher. When an attacker selects a stream-mode cipher via the PWRI keyEncryptionAlgorithm OID, the length guard is ineffective and the allocated buffer can be smaller than required, producing a heap over-read. Applications calling CMS_decrypt() or CMS_decrypt_set1_password() on untrusted CMS data are affected.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
On 32-bit systems, an integer overflow vulnerability exists in libarchive's zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie, Proxy-Authorization, and all custom headers are forwarded to the redirect target.
6.8 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Validating certificate chains which contain DSA public keys can cause programs to panic, due to an interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker using crafted manipulations that ensure the worst case is reached.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of a path is a symbolic link and the path ends in /. For example, root.Open("symlink/") will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.
7.3 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.
7.1 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.
7.5 (High)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
LabX Standard 21.4.25
METTLER TOLEDO / Software / LabX Standard
|
cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*
|
21.4.25 |
None Available
|
References
4 references
Acknowledgments
{
"document": {
"acknowledgments": [
{
"organization": "CERT@VDE",
"summary": "coordination",
"urls": [
"https://certvde.com"
]
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-GB",
"notes": [
{
"category": "summary",
"text": "The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.\n\nThe vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25\n\nAll other vulnerabilities are to be fixed in the upcoming releases.",
"title": "Summary"
},
{
"category": "description",
"text": "The fixed vulnerabilities remove remote code execution and confidentiality loss issues. The identified medium-severity vulnerabilities may expose the system to risks such as denial of service, authentication or certificate validation bypass, and memory corruption.",
"title": "Impact"
},
{
"category": "description",
"text": "To address vulnerabilities CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, update LabX Standard versions 21.3.22 - 21.4.23 to LabX Standard v21.4.25 and LabX Enterprise versions 21.3.22 - 21.4.23 to LabX Enterprise v21.4.25.\nTo address vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, update LabX Standard versions 21.3.22 - 21.4.23 to LabX Standard v21.4.25.",
"title": "Remediation"
},
{
"category": "legal_disclaimer",
"text": "Your use of the information on this document or materials linked from this document is at your own risk. METTLER TOLEDO makes reasonable efforts to ensure the accuracy of the information but does not grant any warranty, express or implied, including warranties of merchantability or fitness for a particular purpose. To the extent permitted by applicable law, METTLER TOLEDO excludes liability for any loss, claim, expense or damage arising from or related to the statements in this document. METTLER TOLEDO reserves the right to change or update this document at any time.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@mt.com",
"name": "Mettler-Toledo GmbH",
"namespace": "https://www.mt.com"
},
"references": [
{
"category": "external",
"summary": "Product security website of METTLER TOLEDO",
"url": "https://www.mt.com/ph/en/home/site_content/product-security.html"
},
{
"category": "external",
"summary": "CERT@VDE Security Advisories for METTLER TOLEDO",
"url": "https://certvde.com/en/advisories/vendor/mettler-toledo/"
},
{
"category": "self",
"summary": "VDE-2026-088: METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 - HTML",
"url": "https://certvde.com/en/advisories/VDE-2026-088/"
},
{
"category": "self",
"summary": "VDE-2026-088: METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 - CSAF",
"url": "https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json"
}
],
"title": "METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4",
"tracking": {
"aliases": [
"VDE-2026-088"
],
"current_release_date": "2026-09-10T10:00:00.000Z",
"generator": {
"date": "2026-09-07T10:14:19.998Z",
"engine": {
"name": "Secvisogram",
"version": "2.6.11"
}
},
"id": "VDE-2026-088",
"initial_release_date": "2026-08-20T10:00:00.000Z",
"revision_history": [
{
"date": "2026-08-07T10:00:00.000Z",
"number": "1.0.0",
"summary": "Initial revision"
},
{
"date": "2026-09-10T10:00:00.000Z",
"number": "2.0.0",
"summary": "corrected version"
}
],
"status": "final",
"version": "2.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=21.3.22|\u003c21.4.25",
"product": {
"name": "LabX Standard versions 21.3.22 - 21.4.23",
"product_id": "CSAFPID-51000",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mettler_toledo:labx_standard:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "21.4.25",
"product": {
"name": "LabX Standard 21.4.25",
"product_id": "CSAFPID-52000",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mettler_toledo:labx_standard:21.4.25:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "LabX Standard"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=21.3.22|\u003c21.4.25",
"product": {
"name": "LabX Enterprise versions 21.3.22 - 21.4.23",
"product_id": "CSAFPID-51001",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mettler_toledo:labx_enterprise:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "21.4.25",
"product": {
"name": "LabX Enterprise 21.4.25",
"product_id": "CSAFPID-52001",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mettler_toledo:labx_enterprise:21.4.25:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "LabX Enterprise"
}
],
"category": "product_family",
"name": "Software"
}
],
"category": "vendor",
"name": "METTLER TOLEDO"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "description",
"text": "Impact: The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in; if Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function(). Patched in version 4.18.0.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000",
"CSAFPID-52001"
],
"known_affected": [
"CSAFPID-51000",
"CSAFPID-51001"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51000"
]
},
{
"category": "vendor_fix",
"details": "Update to LabX Enterprise v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
},
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"environmentalScore": 9.8,
"environmentalSeverity": "CRITICAL",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 9.8,
"temporalSeverity": "CRITICAL",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-51001"
]
}
],
"title": "Code injection in Lodash _.template via unvalidated options.imports key names"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"notes": [
{
"category": "description",
"text": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 :path pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the :path omitted the mandatory leading slash (e.g., Service/Method instead of /Service/Method). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official grpc/authz package) evaluated the raw, non-canonical path string, so deny rules defined using canonical paths failed to match the incoming request, allowing it to bypass the policy if a fallback allow rule was present. Exploitable by sending raw HTTP/2 frames with malformed :path headers directly to the gRPC server. Fixed in version 1.79.3.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000",
"CSAFPID-52001"
],
"known_affected": [
"CSAFPID-51000",
"CSAFPID-51001"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51000"
]
},
{
"category": "vendor_fix",
"details": "Update to LabX Enterprise v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
},
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"environmentalScore": 9.1,
"environmentalSeverity": "CRITICAL",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 9.1,
"temporalSeverity": "CRITICAL",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51001"
]
}
],
"title": "Authorization bypass in gRPC-Go via non-canonical HTTP/2 :path pseudo-header"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"notes": [
{
"category": "description",
"text": "The ToASCII and ToUnicode functions in Go\u0027s golang.org/x/net/idna package incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package: a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\"; if that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permit access to the Unicode name \"example.com\".",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000",
"CSAFPID-52001"
],
"known_affected": [
"CSAFPID-51000",
"CSAFPID-51001"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51000"
]
},
{
"category": "vendor_fix",
"details": "Update to LabX Enterprise v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
},
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"environmentalScore": 9.6,
"environmentalSeverity": "CRITICAL",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"temporalScore": 9.6,
"temporalSeverity": "CRITICAL",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51001"
]
}
],
"title": "Privilege escalation in Go idna package via Punycode labels decoding to ASCII-only names"
},
{
"cve": "CVE-2026-33671",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"notes": [
{
"category": "description",
"text": "Picomatch is a glob matcher written in JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain patterns using extglob quantifiers such as +() and *(), especially when combined with overlapping alternatives or nested extglobs, are compiled into regular expressions that can exhibit catastrophic backtracking on non-matching input. Applications that allow untrusted users to supply glob patterns passed to picomatch for compilation or matching can suffer excessive CPU consumption and a blocked Node.js event loop, resulting in denial of service. Fixed in picomatch 4.0.4, 3.0.2, and 2.3.2.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000",
"CSAFPID-52001"
],
"known_affected": [
"CSAFPID-51000",
"CSAFPID-51001"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51000"
]
},
{
"category": "vendor_fix",
"details": "Update to LabX Enterprise v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
},
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-51001"
]
}
],
"title": "ReDoS in Picomatch glob matcher via crafted extglob patterns"
},
{
"cve": "CVE-2026-0915",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "description",
"text": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library\u0027s DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000"
],
"known_affected": [
"CSAFPID-51000"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
}
],
"title": "getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler"
},
{
"cve": "CVE-2025-69419",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000"
],
"known_affected": [
"CSAFPID-51000"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.4,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.4,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
}
],
"title": "Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion"
},
{
"cve": "CVE-2025-15467",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-52000"
],
"known_affected": [
"CSAFPID-51000"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to LabX Standard v21.4.25 to address the vulnerability.",
"product_ids": [
"CSAFPID-51000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 8.8,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-51000"
]
}
],
"title": "Stack buffer overflow in CMS (Auth)EnvelopedData parsing"
},
{
"cve": "CVE-2026-7383",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. The destination size for Unicode output is computed in a signed int and the calculation overflows when the input reaches around 2^30 characters, causing the size to wrap to zero, a 1-byte allocation, and a character copy that writes several gigabytes past the allocation. Triggering the bug requires an application that calls ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers a custom string type via ASN1_STRING_TABLE_add(), with attacker-controlled input on the order of half a gigabyte or more.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer overflow in OpenSSL ASN1_mbstring_ncopy() via signed integer overflow"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "description",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition. Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected; applications using the CMS APIs are not affected.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Use-after-free in OpenSSL PKCS7_verify() via empty SignedData digestAlgorithms SET"
},
{
"cve": "CVE-2026-34182",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"notes": [
{
"category": "description",
"text": "Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers. An on-path attacker who captures a legitimate AES-GCM AuthEnvelopedData message can re-emit it with the inner cipher OID rewritten to an unauthenticated stream mode (AES-256-OFB) and attacker-chosen IV/ciphertext; the victim\u0027s private key still unwraps the genuine content-encryption key, CMS_decrypt() never consults the MAC, and returns success, allowing the attacker to obtain key-equivalent functionality via a decryption oracle. Separately, an attacker can reduce an AEAD tag length to one byte, enabling brute-force integrity bypass of CMS_decrypt().",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Insufficient cipher/tag-length validation in OpenSSL CMS AuthEnvelopedData processing"
},
{
"cve": "CVE-2026-33845",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "description",
"text": "A flaw in GnuTLS DTLS zero-length fragment handling can be exploited to cause a denial of service.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in GnuTLS via DTLS zero-length fragment"
},
{
"cve": "CVE-2026-27135",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "description",
"text": "nghttp2 is an implementation of HTTP/2 in C. Prior to version 1.68.1, the library stops reading incoming data when nghttp2_session_terminate_session or nghttp2_session_terminate_session2 is called, but due to missing internal state validation it continues reading the rest of the data after one of those APIs is called. Receiving a subsequent malformed frame that causes a FRAME_SIZE_ERROR then triggers an assertion failure. No known workarounds are available.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Reachable assertion in nghttp2 via post-termination frame processing"
},
{
"cve": "CVE-2025-69534",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "description",
"text": "Python-Markdown version 3.8 contains a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processes attacker-controlled Markdown may crash, enabling remote, unauthenticated denial of service in web applications, documentation systems, CI/CD pipelines, and any service that renders untrusted Markdown; it can also lead to information disclosure through the uncaught exception. Fixed in version 3.8.1.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Unhandled AssertionError in Python-Markdown HTML parsing causes denial of service"
},
{
"cve": "CVE-2026-6100",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "description",
"text": "Use-after-free (UAF) was possible in Python\u0027s lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the decompression instance is re-used, which can be triggered under memory pressure. The fix cleans up the dangling pointer in this error condition. One-shot helper functions such as lzma.decompress(), bz2.decompress(), gzip.decompress(), and zlib.decompress() are not affected, as they use a new decompressor instance per call.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Use-after-free in Python decompressor re-use after MemoryError (lzma/bz2/gzip)"
},
{
"cve": "CVE-2026-42496",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "description",
"text": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker-controlled targets outside the extraction directory. _make_special_file() passes the tar header\u0027s linkname to symlink() without validating it against absolute paths or \u0027..\u0027 segments, and the secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker-chosen path.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Symlink path traversal in Perl Archive::Tar extraction"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "description",
"text": "Pathological inputs could cause denial of service through consumePhrase when parsing an email address in Go\u0027s net/mail package according to RFC 5322.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in Go net/mail consumePhrase via pathological email address input"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Inefficient certificate policy validation in Go crypto/x509 causing denial of service"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-425",
"name": "Direct Request (\u0027Forced Browsing\u0027)"
},
"notes": [
{
"category": "description",
"text": "Go\u0027s net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Insufficient host/authority validation in Go net/url.Parse allowing invalid URLs"
},
{
"cve": "CVE-2026-39836",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "description",
"text": "The Dial and LookupPort functions in Go\u0027s net package panic on Windows when provided with an input containing a NUL (0) byte.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Panic in Go net.Dial/LookupPort on Windows via NUL byte in input"
},
{
"cve": "CVE-2025-61725",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "The ParseAddress function in Go\u0027s net/mail package constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Excessive CPU consumption in Go net/mail ParseAddress via domain-literal concatenation"
},
{
"cve": "CVE-2025-22871",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "description",
"text": "The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "HTTP request smuggling in Go net/http via bare LF in chunked transfer encoding"
},
{
"cve": "CVE-2026-5773",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "description",
"text": "libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. Due to a logical error in the connection-reuse pool code, a network transfer operation could wrongfully reuse an existing SMB connection to the same server that was using a different \u0027share\u0027 than the new transfer should use, which could in unlucky situations lead to the download of the wrong file or the upload of a file to the wrong place. When this happens, the same credentials are used and the server name is the same.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Wrong SMB connection reuse in libcurl leading to cross-share file exposure"
},
{
"cve": "CVE-2026-6276",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "description",
"text": "Using libcurl, when a custom Host: header is first set for an HTTP request and a second request is subsequently done using the same easy handle but without the custom Host: header set, the second request would use stale information and pass on cookies meant for the first host in the second request, leaking them.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Cookie leak across hosts in libcurl via stale custom Host: header state"
},
{
"cve": "CVE-2026-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Mismatched TLS connection reuse in libcurl during STARTTLS upgrade"
},
{
"cve": "CVE-2026-8924",
"cwe": {
"id": "CWE-350",
"name": "Reliance on Reverse DNS Resolution for a Security-Critical Action"
},
"notes": [
{
"category": "description",
"text": "A flaw in curl\u0027s cookie parsing logic allows a malicious HTTP server to set \u0027super cookies\u0027 that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Supercookie injection in libcurl via Public Suffix List bypass"
},
{
"cve": "CVE-2026-8927",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "description",
"text": "When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against proxyA using Digest auth, a subsequent transfer routed through proxyB erroneously leaks the Proxy-Authorization: header intended solely for proxyA.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Proxy-Authorization header leak in libcurl via stale proxy auth state on handle reuse"
},
{
"cve": "CVE-2025-58187",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "description",
"text": "Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains",
"title": "CVE description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Quadratic complexity in Go crypto/x509 name constraint checking"
},
{
"cve": "CVE-2026-41992",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "description",
"text": "GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out-of-bounds read in the LZH decoder. This issue has been fixed in commit 63dbf6b3b9e6e781df1a6a64e609b10e23969681.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Global buffer over-read in GNU gzip LZH decompression via shared decoder state"
},
{
"cve": "CVE-2026-5435",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "description",
"text": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Out-of-bounds write in glibc deprecated DNS resolver print functions (TSIG record handling)"
},
{
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap out-of-bounds read in libarchive RAR decompression (LZSS sliding window)"
},
{
"cve": "CVE-2026-42012",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "GnuTLS: certificate validation bypass due to improper handling of URI and SRV SANs. Improper handling of certain Subject Alternative Name types can allow a certificate validation bypass under specific conditions.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Certificate validation bypass in GnuTLS via improper URI/SRV SAN handling"
},
{
"cve": "CVE-2026-33846",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"notes": [
{
"category": "description",
"text": "A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. In merge_handshake_packet(), incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer overflow in GnuTLS DTLS handshake fragment reassembly"
},
{
"cve": "CVE-2026-42009",
"cwe": {
"id": "CWE-475",
"name": "Undefined Behavior for Input to API"
},
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in GnuTLS DTLS packet reordering comparator (duplicate sequence numbers)"
},
{
"cve": "CVE-2025-69720",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "description",
"text": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack-based buffer overflow in ncurses infocmp analyze_string()"
},
{
"cve": "CVE-2022-41409",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability affecting the pcre2test utility in PCRE2 versions before 10.41. The issue occurs when processing negative repeat values in the pcre2test subject line, which can trigger an integer overflow condition leading to infinite looping and denial of service through resource exhaustion.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Integer overflow in PCRE2 pcre2test utility via negative repeat values"
},
{
"cve": "CVE-2017-11164",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "description",
"text": "In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression. Exploitation requires an application to take regular expressions as untrusted input.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack exhaustion in PCRE via uncontrolled recursion (OP_KETRMAX)"
},
{
"cve": "CVE-2026-4786",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "description",
"text": "Mitigation of CVE-2026-4519 was incomplete. If the URL contained \"%action\" the mitigation could be bypassed for certain browser types, allowing the webbrowser.open() API to have commands injected into the underlying shell.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Command injection in Python webbrowser.open() via incomplete URL mitigation bypass"
},
{
"cve": "CVE-2026-3644",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "description",
"text": "The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Improper input validation in Python http.cookies.Morsel allows control character injection"
},
{
"cve": "CVE-2026-4224",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "description",
"text": "When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack overflow in Expat XML parser via deeply nested DTD content model"
},
{
"cve": "CVE-2026-11822",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "description",
"text": "SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Memory corruption in SQLite FTS5 extension via malformed page data"
},
{
"cve": "CVE-2026-42899",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "description",
"text": "Loop with unreachable exit condition (\u0027infinite loop\u0027) in ASP.NET Core allows an unauthorized attacker to deny service over a network. The issue spans multiple ASP.NET Core subsystems in .NET 8.0, .NET 9.0, and .NET 10.0.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in ASP.NET Core via infinite loop"
},
{
"cve": "CVE-2026-4437",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library\u0027s DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Out-of-bounds read in glibc DNS backend via crafted DNS response (gethostbyaddr)"
},
{
"cve": "CVE-2026-4046",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "description",
"text": "The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Reachable assertion in glibc iconv() via IBM1390/IBM1399 character set conversion"
},
{
"cve": "CVE-2025-5222",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "description",
"text": "A stack buffer overflow vulnerability was discovered in International Components for Unicode (ICU) affecting the SRBRoot::addTag function when running the genrb binary, where the \u0027subtag\u0027 struct can overflow. If successfully exploited, this can lead to memory corruption and potential local arbitrary code execution.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Stack buffer overflow in ICU genrb SRBRoot::addTag"
},
{
"cve": "CVE-2026-45445",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"notes": [
{
"category": "description",
"text": "When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Every message encrypted under the same key uses the same effective nonce regardless of the IV supplied by the caller, resulting in (key, nonce) reuse and loss of confidentiality. If the same code path is used to compute the authentication tag, the tag depends only on the (key, IV) pair and not on the plaintext or ciphertext, allowing universal forgery of arbitrary ciphertext from a single captured message.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "IV reuse and forgery in OpenSSL AES-OCB via EVP_Cipher() one-shot interface"
},
{
"cve": "CVE-2026-34180",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. An integer truncation in OpenSSL\u0027s ASN.1 decoder causes the content length of a primitive element to be mishandled, which may crash the application or load adjacent heap memory into the decoded object. Applications passing attacker-supplied data to d2i_X509(), d2i_PKCS7(), or any other d2i_* decoding function are affected.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer over-read in OpenSSL ASN.1 decoder via oversized DER element"
},
{
"cve": "CVE-2026-9076",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "The kek_unwrap_key() function validates the wrapping cipher\u0027s block length before performing an RFC 3211 check-byte test but does not verify the cipher is actually a block cipher. When an attacker selects a stream-mode cipher via the PWRI keyEncryptionAlgorithm OID, the length guard is ineffective and the allocated buffer can be smaller than required, producing a heap over-read. Applications calling CMS_decrypt() or CMS_decrypt_set1_password() on untrusted CMS data are affected.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer over-read in OpenSSL CMS PWRI key unwrap (kek_unwrap_key)"
},
{
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "On 32-bit systems, an integer overflow vulnerability exists in libarchive\u0027s zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Integer overflow in libarchive zisofs block pointer allocation (32-bit)"
},
{
"cve": "CVE-2026-45591",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "description",
"text": "Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "CVE description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Denial of service in ASP.NET Core SignalR/Blazor via nested MessagePack arrays"
},
{
"cve": "CVE-2026-44503",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "description",
"text": "The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie, Proxy-Authorization, and all custom headers are forwarded to the redirect target."
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"environmentalScore": 6.8,
"environmentalSeverity": "MEDIUM",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"temporalScore": 6.8,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Kiota RedirectHandler header-leak issue"
},
{
"cve": "CVE-2025-47907",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "description",
"text": "Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Race condition in Go database/sql Rows.Scan during concurrent query cancellation"
},
{
"cve": "CVE-2025-58188",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "Validating certificate chains which contain DSA public keys can cause programs to panic, due to an interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Panic in Go crypto/x509 when validating certificate chains containing DSA public keys"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "description",
"text": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Quadratic-time resource exhaustion in Go crypto/x509 HostnameError.Error()"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "description",
"text": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker using crafted manipulations that ensure the worst case is reached.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "CPU exhaustion in Go MIME header decoding via invalid encoded-words"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "description",
"text": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Double-free in Go cgo DNS resolver LookupCNAME via long CNAME response"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Unbounded resource consumption in Go crypto/x509 certificate chain building"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Unbounded memory consumption in Go net/url query parameter parsing"
},
{
"cve": "CVE-2025-61723",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Non-linear processing time in Go PEM parsing of invalid inputs"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "CPU and memory exhaustion in Go net/mail ParseAddress/ParseAddressList/ParseDate"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "description",
"text": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "TLS 1.3 connection deadlock via repeated post-handshake key update messages"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "description",
"text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Infinite loop in Go HTTP/2 transport via SETTINGS_MAX_FRAME_SIZE of 0"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-61",
"name": "UNIX Symbolic Link (Symlink) Following"
},
"notes": [
{
"category": "description",
"text": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of a path is a symbolic link and the path ends in /. For example, root.Open(\"symlink/\") will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root.",
"title": "CVE Description"
},
{
"category": "other",
"text": "NVD has not yet published a CVSS score for this CVE at the time of research (published 2026-07-07, still awaiting enrichment). Score left unset rather than estimated; update once NVD/CNA enrichment completes.",
"title": "Scoring Note"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"environmentalScore": 7.3,
"environmentalSeverity": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.3,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "os.Root symlink escape via trailing slash on final path component (Go)"
},
{
"cve": "CVE-2026-58471",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "description",
"text": "GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer overflow in GNU Wget convert_fname() via server-supplied filename"
},
{
"cve": "CVE-2026-58472",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "description",
"text": "GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Integer overflow leading to heap buffer overflow in GNU Wget html_quote_string()"
},
{
"cve": "CVE-2026-58469",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "description",
"text": "GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"CSAFPID-52000"
],
"recommended": [
"CSAFPID-52000"
]
},
"remediations": [
{
"category": "none_available",
"details": "This vulnerability will be fixed in the upcoming releases",
"product_ids": [
"CSAFPID-52000"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-52000"
]
}
],
"title": "Heap buffer underread in GNU Wget clean_metalink_string() via whitespace-only URL"
}
]
}
WID-SEC-W-2026-1845
Vulnerability from csaf_certbund - Published: 2026-06-09 22:00 - Updated: 2026-06-17 22:00Summary
Microsoft DeveloperTools: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Visual Studio Code ist ein Quelltext-Editor von Microsoft.
Microsoft ASP.NET (Active Server Pages .NET) ist eine Technologie zum Erstellen dynamischer Webseiten, Webanwendungen und Webservices auf Basis des Microsoft .NET-Frameworks.
Microsoft .NET ist ein Software-Framework für die Entwicklung und Ausführung von Anwendungen.
Microsoft Visual Studio ist eine integrierte Entwicklungsumgebung (IDE) von Microsoft, die zum Erstellen von Anwendungen für verschiedene Plattformen verwendet wird.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, Microsoft ASP.NET, Microsoft .NET und Microsoft Visual Studio 2026 ausnutzen, um Administratorrechte zu erlangen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder die Authentifizierung zu umgehen.
Betroffene Betriebssysteme: - Linux
- MacOS X
- Windows
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
Affected products
Known affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Visual Studio Code
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-
|
— | |
|
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:copilot_chat_extension
|
CoPilot Chat Extension | |
|
Microsoft ASP.NET Core 9.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_9.0
|
Core 9.0 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft Visual Studio 2026 version 18.6
Microsoft / Visual Studio 2026
|
version 18.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft Visual Studio Code - MSSQL Extension
Microsoft / Visual Studio Code
|
cpe:/a:microsoft:visual_studio_code:-_mssql_extension
|
- MSSQL Extension | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Microsoft ASP.NET Core 10.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_10.0
|
Core 10.0 | |
|
Microsoft .NET 8.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:8.0
|
8 | |
|
Microsoft ASP.NET Core 8.0
Microsoft / ASP.NET
|
cpe:/a:microsoft:asp.net:core_8.0
|
Core 8.0 | |
|
Microsoft .NET 10.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:10.0
|
10 | |
|
Microsoft .NET 9.0
Microsoft / .NET
|
cpe:/a:microsoft:.net:9.0
|
9 | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— |
References
27 references
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://msrc.microsoft.com/update-guide/ | external |
| https://access.redhat.com/errata/RHSA-2026:25110 | external |
| https://access.redhat.com/errata/RHSA-2026:25111 | external |
| https://access.redhat.com/errata/RHSA-2026:25112 | external |
| https://access.redhat.com/errata/RHSA-2026:25113 | external |
| https://access.redhat.com/errata/RHSA-2026:25114 | external |
| https://access.redhat.com/errata/RHSA-2026:25115 | external |
| https://access.redhat.com/errata/RHSA-2026:25222 | external |
| https://errata.build.resf.org/RLSA-2026:25114 | external |
| https://errata.build.resf.org/RLSA-2026:25113 | external |
| https://errata.build.resf.org/RLSA-2026:25110 | external |
| https://linux.oracle.com/errata/ELSA-2026-25113.html | external |
| https://linux.oracle.com/errata/ELSA-2026-25110.html | external |
| https://linux.oracle.com/errata/ELSA-2026-25114.html | external |
| https://ubuntu.com/security/notices/USN-8420-1 | external |
| https://access.redhat.com/errata/RHSA-2026:25220 | external |
| https://access.redhat.com/errata/RHSA-2026:25221 | external |
| https://errata.build.resf.org/RLSA-2026:25111 | external |
| https://errata.build.resf.org/RLSA-2026:25112 | external |
| https://errata.build.resf.org/RLSA-2026:25222 | external |
| https://errata.build.resf.org/RLSA-2026:25220 | external |
| https://errata.build.resf.org/RLSA-2026:25115 | external |
| https://errata.build.resf.org/RLSA-2026:25221 | external |
| https://access.redhat.com/errata/RHSA-2026:26638 | external |
| https://access.redhat.com/errata/RHSA-2026:26994 | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Visual Studio Code ist ein Quelltext-Editor von Microsoft. \r\nMicrosoft ASP.NET (Active Server Pages .NET) ist eine Technologie zum Erstellen dynamischer Webseiten, Webanwendungen und Webservices auf Basis des Microsoft .NET-Frameworks.\r\nMicrosoft .NET ist ein Software-Framework f\u00fcr die Entwicklung und Ausf\u00fchrung von Anwendungen.\r\nMicrosoft Visual Studio ist eine integrierte Entwicklungsumgebung (IDE) von Microsoft, die zum Erstellen von Anwendungen f\u00fcr verschiedene Plattformen verwendet wird.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, Microsoft ASP.NET, Microsoft .NET und Microsoft Visual Studio 2026 ausnutzen, um Administratorrechte zu erlangen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder die Authentifizierung zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- MacOS X\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1845 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1845.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1845 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1845"
},
{
"category": "external",
"summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
"url": "https://msrc.microsoft.com/update-guide/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25110 vom 2026-06-10",
"url": "https://access.redhat.com/errata/RHSA-2026:25110"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25111 vom 2026-06-10",
"url": "https://access.redhat.com/errata/RHSA-2026:25111"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25112 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:25112"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25113 vom 2026-06-10",
"url": "https://access.redhat.com/errata/RHSA-2026:25113"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25114 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:25114"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25115 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:25115"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25222 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:25222"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25114 vom 2026-06-12",
"url": "https://errata.build.resf.org/RLSA-2026:25114"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25113 vom 2026-06-12",
"url": "https://errata.build.resf.org/RLSA-2026:25113"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25110 vom 2026-06-12",
"url": "https://errata.build.resf.org/RLSA-2026:25110"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-25113 vom 2026-06-11",
"url": "https://linux.oracle.com/errata/ELSA-2026-25113.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-25110 vom 2026-06-11",
"url": "https://linux.oracle.com/errata/ELSA-2026-25110.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-25114 vom 2026-06-12",
"url": "https://linux.oracle.com/errata/ELSA-2026-25114.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8420-1 vom 2026-06-11",
"url": "https://ubuntu.com/security/notices/USN-8420-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25220 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:25220"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25221 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:25221"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25111 vom 2026-06-13",
"url": "https://errata.build.resf.org/RLSA-2026:25111"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25112 vom 2026-06-13",
"url": "https://errata.build.resf.org/RLSA-2026:25112"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25222 vom 2026-06-13",
"url": "https://errata.build.resf.org/RLSA-2026:25222"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25220 vom 2026-06-13",
"url": "https://errata.build.resf.org/RLSA-2026:25220"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25115 vom 2026-06-13",
"url": "https://errata.build.resf.org/RLSA-2026:25115"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:25221 vom 2026-06-13",
"url": "https://errata.build.resf.org/RLSA-2026:25221"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:26638 vom 2026-06-17",
"url": "https://access.redhat.com/errata/RHSA-2026:26638"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:26994 vom 2026-06-18",
"url": "https://access.redhat.com/errata/RHSA-2026:26994"
}
],
"source_lang": "en-US",
"title": "Microsoft DeveloperTools: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-06-17T22:00:00.000+00:00",
"generator": {
"date": "2026-06-18T08:31:57.564+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-1845",
"initial_release_date": "2026-06-09T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-06-09T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-06-10T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-11T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat, Rocky Enterprise Software Foundation, Oracle Linux und Ubuntu aufgenommen"
},
{
"date": "2026-06-14T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2026-06-17T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "10",
"product": {
"name": "Microsoft .NET 10.0",
"product_id": "T051615",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net:10.0"
}
}
},
{
"category": "product_version",
"name": "9",
"product": {
"name": "Microsoft .NET 9.0",
"product_id": "T051616",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net:9.0"
}
}
},
{
"category": "product_version",
"name": "8",
"product": {
"name": "Microsoft .NET 8.0",
"product_id": "T055115",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net:8.0"
}
}
}
],
"category": "product_name",
"name": ".NET"
},
{
"branches": [
{
"category": "product_version",
"name": "Core 8.0",
"product": {
"name": "Microsoft ASP.NET Core 8.0",
"product_id": "T055114",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:asp.net:core_8.0"
}
}
},
{
"category": "product_version",
"name": "Core 9.0",
"product": {
"name": "Microsoft ASP.NET Core 9.0",
"product_id": "T055122",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:asp.net:core_9.0"
}
}
},
{
"category": "product_version",
"name": "Core 10.0",
"product": {
"name": "Microsoft ASP.NET Core 10.0",
"product_id": "T055127",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:asp.net:core_10.0"
}
}
}
],
"category": "product_name",
"name": "ASP.NET"
},
{
"branches": [
{
"category": "product_version_range",
"name": "version 18.6",
"product": {
"name": "Microsoft Visual Studio 2026 version 18.6",
"product_id": "T055129"
}
}
],
"category": "product_name",
"name": "Visual Studio 2026"
},
{
"branches": [
{
"category": "product_name",
"name": "Microsoft Visual Studio Code",
"product": {
"name": "Microsoft Visual Studio Code",
"product_id": "T055113",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:visual_studio_code:-"
}
}
},
{
"category": "product_version",
"name": "CoPilot Chat Extension",
"product": {
"name": "Microsoft Visual Studio Code CoPilot Chat Extension",
"product_id": "T055123",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:visual_studio_code:copilot_chat_extension"
}
}
},
{
"category": "product_version",
"name": "- MSSQL Extension",
"product": {
"name": "Microsoft Visual Studio Code - MSSQL Extension",
"product_id": "T055128",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:visual_studio_code:-_mssql_extension"
}
}
}
],
"category": "product_name",
"name": "Visual Studio Code"
}
],
"category": "vendor",
"name": "Microsoft"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-40376",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-40376"
},
{
"cve": "CVE-2026-45482",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-45482"
},
{
"cve": "CVE-2026-45490",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-45490"
},
{
"cve": "CVE-2026-45491",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-45491"
},
{
"cve": "CVE-2026-45591",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-45591"
},
{
"cve": "CVE-2026-45644",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-45644"
},
{
"cve": "CVE-2026-47281",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-47281"
},
{
"cve": "CVE-2026-47284",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-47284"
},
{
"cve": "CVE-2026-47287",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-47287"
},
{
"cve": "CVE-2026-47292",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-47292"
},
{
"cve": "CVE-2026-48569",
"product_status": {
"known_affected": [
"T055113",
"T055123",
"T055122",
"67646",
"T055129",
"T004914",
"T055128",
"T032255",
"T055127",
"T055115",
"T055114",
"T051615",
"T051616",
"T000126"
]
},
"release_date": "2026-06-09T22:00:00.000+00:00",
"title": "CVE-2026-48569"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…