RHSA-2026:89735
Vulnerability from csaf_redhat - Published: 2026-10-27 06:45 - Updated: 2026-10-30 06:54Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressure, excessive garbage collection, process termination, or loss of service. Exposure requires an application to deserialize untrusted data through the affected formatter path and permit repeated attacker-controlled submissions, such as a reachable ASP.NET Core SignalR hub method with an object parameter and AddMessagePackProtocol() enabled. This issue is fixed in versions 2.5.303 and 3.1.9.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": ".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a \u0027dotnet\u0027 application to drive everything.\n\nSDK version: 9.0.122\nRuntime version: 9.0.21\n\nSecurity Fix(es):\n\n* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)\n\n* dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)\n\n* dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-58280)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability (CVE-2026-66822)\n\n* dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability (CVE-2026-69651)\n\n* dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70159)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70175)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70179)\n\n* dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70181)\n\n* dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-70183)\n\n* dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70186)\n\n* dotnet: ASP.NET Core Security Feature Bypass Vulnerability (CVE-2026-70188)\n\n* dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-70196)\n\n* dotnet: ASP.NET Core Tampering Vulnerability (CVE-2026-88092)\n\n* dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits (CVE-2026-92707)\n\n* dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96225)\n\n* dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability (CVE-2026-96230)\n\n* dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability (CVE-2026-96231)\n\n* dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96233)\n\n* dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability (CVE-2026-96236)\n\n* dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability (CVE-2026-96237)\n\n* dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability (CVE-2026-96238)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:89735",
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2528870",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528870"
},
{
"category": "external",
"summary": "2528921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528921"
},
{
"category": "external",
"summary": "2548778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548778"
},
{
"category": "external",
"summary": "2548781",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548781"
},
{
"category": "external",
"summary": "2548784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548784"
},
{
"category": "external",
"summary": "2548786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548786"
},
{
"category": "external",
"summary": "2548787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548787"
},
{
"category": "external",
"summary": "2548790",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548790"
},
{
"category": "external",
"summary": "2548791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548791"
},
{
"category": "external",
"summary": "2548792",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548792"
},
{
"category": "external",
"summary": "2548793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548793"
},
{
"category": "external",
"summary": "2548796",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548796"
},
{
"category": "external",
"summary": "2548798",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548798"
},
{
"category": "external",
"summary": "2548799",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548799"
},
{
"category": "external",
"summary": "2548800",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548800"
},
{
"category": "external",
"summary": "2548803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548803"
},
{
"category": "external",
"summary": "2548804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548804"
},
{
"category": "external",
"summary": "2548805",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548805"
},
{
"category": "external",
"summary": "2548806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548806"
},
{
"category": "external",
"summary": "2548807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548807"
},
{
"category": "external",
"summary": "2548808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548808"
},
{
"category": "external",
"summary": "2548809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548809"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89735.json"
}
],
"title": "Red Hat Security Advisory: .NET 9.0 security update",
"tracking": {
"current_release_date": "2026-10-30T06:54:50+00:00",
"generator": {
"date": "2026-10-30T06:54:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.3"
}
},
"id": "RHSA-2026:89735",
"initial_release_date": "2026-10-27T06:45:51+00:00",
"revision_history": [
{
"date": "2026-10-27T06:45:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-27T06:45:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-30T06:54:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product": {
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-host-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-host-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-host-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-host-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-host-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-host-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-templates-9.0@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"product_id": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debugsource@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-host-debuginfo@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_id": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo@9.0.21-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0-debuginfo@9.0.122-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"product": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"product_id": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts@9.0.122-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9.0-0:9.0.122-1.el9_6.src",
"product": {
"name": "dotnet9.0-0:9.0.122-1.el9_6.src",
"product_id": "dotnet9.0-0:9.0.122-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0@9.0.122-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-host-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-host-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-host-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-0:9.0.122-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src"
},
"product_reference": "dotnet9.0-0:9.0.122-1.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64"
},
"product_reference": "dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
},
"product_reference": "dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-58280",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548778"
}
],
"notes": [
{
"category": "description",
"text": "Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having an Important impact because an unauthenticated remote attacker can trigger excessive resource consumption over the network, leading to service disruption without needing elevated privileges. In Red Hat environments, exposure is limited to .NET applications and services that ingest untrusted XML content and evaluate XML signatures or canonicalization transforms. Workloads that only process validated, trusted data or do not implement signed XML parsing remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58280"
},
{
"category": "external",
"summary": "RHBZ#2548778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548778"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58280"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-58649",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-09-14T21:15:47+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528870"
}
],
"notes": [
{
"category": "description",
"text": "Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A moderate information disclosure vulnerability was found in the .NET SDK, where the `dotnet watch` BrowserRefreshServer does not adequately validate the origin of cross-origin WebSocket connections. A remote, unauthenticated attacker who tricks a user into interacting with attacker-controlled web content can connect to the browser-refresh WebSocket used during development and retrieve compiled intermediate language (IL) assemblies and program database (PDB) debug files from the development environment, exposing information that should remain confidential. Red Hat rates this issue as moderate severity (CVSS 3.1 score 6.5, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), matching the upstream severity. Red Hat Enterprise Linux 8, 9, and 10, Red Hat In-Vehicle OS 2, and Red Hat hardened images that ship the affected .NET SDK (dotnet8.0, dotnet9.0, dotnet10.0) are affected, and fixes are being pursued for these components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58649"
},
{
"category": "external",
"summary": "RHBZ#2528870",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528870"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58649"
}
],
"release_date": "2026-09-08T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability"
},
{
"cve": "CVE-2026-66822",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548781"
}
],
"notes": [
{
"category": "description",
"text": "Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A moderate information disclosure vulnerability was found in the .NET runtime. When a .NET application using SocketsHttpHandler sends a request through a proxy that authenticates with basic credentials and the response is an HTTP redirect, the Proxy-Authorization header can be incorrectly retained and forwarded with the redirected request, leaking the basic proxy credentials to the destination server. This allows an unauthorized remote attacker to disclose sensitive proxy authentication information over a network. Red Hat rates this flaw Moderate severity with a CVSS 3.1 base score of 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N), consistent with the upstream assessment. All currently tracked Red Hat product streams shipping the affected dotnet8.0, dotnet9.0, and dotnet10.0 components, including Red Hat Enterprise Linux and Red Hat Hardened Images, are affected, and fixes are being pursued through the respective product channels.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66822"
},
{
"category": "external",
"summary": "RHBZ#2548781",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548781"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66822"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability"
},
{
"cve": "CVE-2026-69651",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548784"
}
],
"notes": [
{
"category": "description",
"text": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important impact for Red Hat products because an unauthenticated remote attacker can cause a denial of service via resource exhaustion without requiring elevated privileges or user interaction. In Red Hat environments, exposure is limited to .NET applications and services that parse untrusted XML signatures using the SignedXml implementation. Applications that do not accept untrusted XML documents or do not perform digital signature verification on untrusted data are not susceptible to this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69651"
},
{
"category": "external",
"summary": "RHBZ#2548784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69651"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-69806",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2026-09-14T21:15:47+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528921"
}
],
"notes": [
{
"category": "description",
"text": "Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An information exposure flaw of important severity was found in the .NET SDK\u0027s dotnet-watch AspireServerService. On Linux, the AspireServerService exposes sensitive information through its process arguments, which are readable via the procfs filesystem, and this exposure can enable injection into the /run_session endpoint. A local attacker with an authorized, low-privileged account could exploit this flaw to elevate privileges on the system, with high attack complexity (CVSS 3.1: 7.0, AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). This matches the upstream severity assigned by Microsoft.\n\nRed Hat Enterprise Linux 8, 9, and 10, Red Hat In-Vehicle OS, and Red Hat hardened images based on dotnet10.0 ship affected packages, and fixes are being pursued for these products. Red Hat hardened images based on dotnet9.0 are not affected because the vulnerable code is not present in that variant. Fedora community builds of dotnet9.0 and dotnet10.0 are also affected. The flaw is Linux-specific because it relies on the procfs interface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69806"
},
{
"category": "external",
"summary": "RHBZ#2528921",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528921"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69806"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69806",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69806"
}
],
"release_date": "2026-09-08T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Updated .NET packages that contain the upstream fix are being delivered through the appropriate Red Hat product channels; apply them when they become available for your release.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-70159",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548786"
}
],
"notes": [
{
"category": "description",
"text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can completely disrupt real-time communication services and exhaust host resources without requiring privileges or user interaction. In Red Hat Enterprise Linux environments running .NET applications, exposure is limited to deployments hosting ASP.NET Core SignalR endpoints that utilize stateful reconnection features. Standard HTTP services or SignalR hubs operating without stateful reconnect enabled are not susceptible to this starvation condition.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70159"
},
{
"category": "external",
"summary": "RHBZ#2548786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70159"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-70175",
"cwe": {
"id": "CWE-640",
"name": "Weak Password Recovery Mechanism for Forgotten Password"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548787"
}
],
"notes": [
{
"category": "description",
"text": "Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker could compromise user accounts and achieve unauthorized privilege escalation in web applications utilizing ASP.NET Core Identity. The flaw specifically exposes deployments implementing built-in Identity confirmation and password-reset routines, which may dispatch sensitive reset tokens to attacker-controlled email addresses rather than the verified account address. Deployments that do not use ASP.NET Core Identity or do not expose standard password-reset and verification endpoints are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70175"
},
{
"category": "external",
"summary": "RHBZ#2548787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548787"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70175"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-70179",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548790"
}
],
"notes": [
{
"category": "description",
"text": "Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an authenticated remote attacker could impersonate a different user account, potentially gaining elevated privileges and compromising application data integrity. In Red Hat environments, exposure is limited to ASP.NET Core workloads explicitly configured to utilize Negotiate authentication paired with LDAP directory lookups. Applications that rely on alternative authentication providers or operate Negotiate authentication without secondary directory resolution are not vulnerable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70179"
},
{
"category": "external",
"summary": "RHBZ#2548790",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548790"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70179",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70179"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70179",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70179"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-70181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-14T17:46:49+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548791"
}
],
"notes": [
{
"category": "description",
"text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an unauthenticated remote attacker can cause severe denial of service by exhausting server memory without requiring special privileges or user interaction. In Red Hat Enterprise Linux and container environments, web applications using affected .NET runtimes to process multipart form requests are exposed over the network. The resulting exhaustion disrupts service availability, although confidentiality and data integrity remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70181"
},
{
"category": "external",
"summary": "RHBZ#2548791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70181"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-70183",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548792"
}
],
"notes": [
{
"category": "description",
"text": "Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An elevation of privilege flaw, rated IMPORTANT by Red Hat Product Security, was found in the Blazor AuthorizeRouteView component of ASP.NET Core. Due to improper synchronization of concurrent execution using a shared resource (a race condition), a stale asynchronous authorization result can be applied after navigation or an authorization-state change, bypassing the current [Authorize] decision. An authorized remote attacker with low privileges could exploit this issue over a network, with high attack complexity, to elevate privileges within the application, affecting confidentiality, integrity, and availability (CVSS 3.1: 7.5, CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Red Hat products that ship the affected ASP.NET Core Runtime, tracked under the dotnet, dotnet8.0, dotnet9.0, and dotnet10.0 components, are affected across the impacted streams and a fix is being pursued. The Red Hat severity assessment (IMPORTANT, CVSS 7.5) is consistent with the upstream CVSS score of 7.5.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70183"
},
{
"category": "external",
"summary": "RHBZ#2548792",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548792"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70183"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. The upstream advisory states that the issue is fixed in ASP.NET Core Runtime 8.0.32, 9.0.21, and 10.0.13 (and 11.0.0-rc.2 for the .NET 11 pre-release channel); users should apply the patched versions of the affected .NET components for their Red Hat offerings once available.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-70186",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548793"
}
],
"notes": [
{
"category": "description",
"text": "Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can cause a denial of service by exhausting server thread and memory resources without requiring specialized privileges. ASP.NET Core deployments on Red Hat Enterprise Linux are susceptible only when Kestrel is configured to directly listen on and accept HTTP/3 connections. In standard production environments where applications operate behind a reverse proxy terminating incoming traffic or where HTTP/3 is not explicitly enabled on the server endpoints, exposure to this flaw is significantly reduced.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70186"
},
{
"category": "external",
"summary": "RHBZ#2548793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548793"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70186"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-70188",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548796"
}
],
"notes": [
{
"category": "description",
"text": "Inconsistent interpretation of http requests (\u0027http request/response smuggling\u0027) in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core Security Feature Bypass Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can exploit HTTP/2 header parsing flaws over network connections without privileges or user interaction, potentially leading to security control bypasses and HTTP request smuggling. ASP.NET Core applications running on Red Hat Enterprise Linux that use Kestrel as a public-facing web server handling HTTP/2 connections are directly exposed. Services utilizing HTTP/1.1 exclusively or processing pre-validated traffic are not exposed to the specific HTTP/2 HPACK parsing flaws.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70188"
},
{
"category": "external",
"summary": "RHBZ#2548796",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548796"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70188"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "dotnet: ASP.NET Core Security Feature Bypass Vulnerability"
},
{
"cve": "CVE-2026-70196",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548798"
}
],
"notes": [
{
"category": "description",
"text": "Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate severity because successful exploitation requires specific request transmission timing, causing excessive CPU utilization without compromising data integrity or system confidentiality. ASP.NET Core applications running on Red Hat platforms that accept and process untrusted form data are susceptible to service degradation. However, the issue does not allow privilege escalation or arbitrary code execution, restricting the impact exclusively to application availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-70196"
},
{
"category": "external",
"summary": "RHBZ#2548798",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548798"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-70196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-70196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-70196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70196"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-88092",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548799"
}
],
"notes": [
{
"category": "description",
"text": "Inconsistent interpretation of http requests (\u0027http request/response smuggling\u0027) in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: ASP.NET Core Tampering Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as having a Critical impact because it allows remote, unauthenticated attackers to execute HTTP request smuggling attacks without requiring user interaction or specialized privileges. ASP.NET Core web applications deployed across Red Hat platforms using Kestrel to process HTTP/1 requests are susceptible if aborted connections lead to desynchronized request boundaries. Exploitation of this desynchronization can result in severe integrity and confidentiality impacts, such as request tampering, credential exposure, or proxy filter evasion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-88092"
},
{
"category": "external",
"summary": "RHBZ#2548799",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548799"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-88092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88092"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88092",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88092"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "dotnet: ASP.NET Core Tampering Vulnerability"
},
{
"cve": "CVE-2026-92707",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548800"
}
],
"notes": [
{
"category": "description",
"text": "MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before the configured object-graph depth limit rejects the input, while nested array headers can reuse the same trailing unread bytes to satisfy per-header length validation. A comparatively small payload can therefore keep many large arrays alive at once. When an attacker can submit such data repeatedly, the allocations can cause severe managed-heap pressure, excessive garbage collection, process termination, or loss of service. Exposure requires an application to deserialize untrusted data through the affected formatter path and permit repeated attacker-controlled submissions, such as a reachable ASP.NET Core SignalR hub method with an object parameter and AddMessagePackProtocol() enabled. This issue is fixed in versions 2.5.303 and 3.1.9.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated with Moderate severity for Red Hat products because exploitation is confined to an application denial of service and requires specific, non-default application configurations. In standard Red Hat Enterprise Linux deployments, .NET applications do not enable MessagePack serialization protocols by default. The issue only impacts environments where applications explicitly configure MessagePack handling\u2014such as ASP.NET Core SignalR hubs utilizing MessagePack\u2014and expose endpoints that deserialize untrusted input into generic object structures. Because arbitrary code execution and unauthorized data disclosure are not possible, the overall risk is reduced.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92707"
},
{
"category": "external",
"summary": "RHBZ#2548800",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548800"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92707"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92707",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92707"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits"
},
{
"cve": "CVE-2026-96225",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548803"
}
],
"notes": [
{
"category": "description",
"text": "Improper link resolution before file access (\u0027link following\u0027) in .NET allows an authorized attacker to elevate privileges locally.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates this vulnerability as Important because an authenticated local user can achieve elevated privileges or corrupt critical files on multi-user systems. In typical Red Hat Enterprise Linux environments hosting .NET applications or services executed by privileged accounts, flaws in shared inter-process communication path handling permit attackers to traverse symbolic links or manipulate permissions in common temporary directories. Exploitation does not require external network exposure or interactive user assistance, though it is constrained to environments where unprivileged local users have shell access to hosts running vulnerable .NET workloads.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96225"
},
{
"category": "external",
"summary": "RHBZ#2548803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548803"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96225",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96225"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96225",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96225"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-96230",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548804"
}
],
"notes": [
{
"category": "description",
"text": "Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027) in ASP.NET Core allows an unauthorized attacker to execute code over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because an attacker can achieve code execution within the context of the user\u0027s session if a developer is tricked into interacting with malicious web content while running the Blazor development server. The flaw specifically resides in the unauthenticated debug endpoint used during hot reload and development workflows, meaning standard production deployments are not directly exposed. Consequently, the risk is primarily constrained to active development environments where the interactive debugging tooling is actively executing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96230"
},
{
"category": "external",
"summary": "RHBZ#2548804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96230",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96230"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability"
},
{
"cve": "CVE-2026-96231",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548805"
}
],
"notes": [
{
"category": "description",
"text": "Improper link resolution before file access (\u0027link following\u0027) in .NET allows an authorized attacker to elevate privileges locally.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important rather than Moderate because an authenticated local user can achieve a complete system compromise and escalate to root privileges without requiring user interaction. In standard Red Hat Enterprise Linux deployments hosting multi-user environments or shared application workloads, .NET applications managing synchronization objects in shared temporary locations are exposed to symlink manipulation. Exploitation strictly requires local host access, limiting the attack surface from external network boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96231"
},
{
"category": "external",
"summary": "RHBZ#2548805",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548805"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96231",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96231"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability"
},
{
"cve": "CVE-2026-96233",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548806"
}
],
"notes": [
{
"category": "description",
"text": "Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an unauthenticated remote attacker can crash .NET applications and ASP.NET Core services by supplying malformed date strings, resulting in process termination and a complete denial of service. The flaw is exposed in applications that accept and parse user-controlled date or time values supporting Hebrew calendar formatting. While the flaw can be triggered remotely without privileges, it cannot be leveraged for arbitrary code execution or data disclosure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96233"
},
{
"category": "external",
"summary": "RHBZ#2548806",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548806"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96233",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96233"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-96236",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548807"
}
],
"notes": [
{
"category": "description",
"text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an unauthenticated remote attacker can exploit it over standard network connections to exhaust application memory without requiring any specialized privileges. In deployments where ASP.NET Core web services use request localization, handling incoming requests with arbitrarily generated culture identifiers populates internal runtime caches without proper bounds. Over time or through an automated flood of requests, this excessive memory allocation leads to application crashes and service outages on host systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96236"
},
{
"category": "external",
"summary": "RHBZ#2548807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96236"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability"
},
{
"cve": "CVE-2026-96237",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548808"
}
],
"notes": [
{
"category": "description",
"text": "Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important rather than Critical because successful exploitation requires specific environmental preconditions and user interaction, such as configuring untrusted package repositories or intercepting package feed traffic during build operations. In Red Hat environments, the issue primarily exposes development workstations and automated build pipelines utilizing the .NET SDK to install or repair workloads. Standard runtime-only container images and server deployments that do not perform SDK workload management operations remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96237"
},
{
"category": "external",
"summary": "RHBZ#2548808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548808"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96237"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability"
},
{
"cve": "CVE-2026-96238",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-10-12T16:05:58+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548809"
}
],
"notes": [
{
"category": "description",
"text": "Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux and container images shipping the .NET SDK because exploitation requires user interaction during template installation operations rather than affecting application runtime execution. While standard package dependency resolution is unaffected, executing template installation commands can cause the SDK to query feeds beyond configured NuGet Package Source Mapping trust boundaries. This flaw primarily presents a risk in development and continuous integration environments where multi-source package repositories are configured.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-96238"
},
{
"category": "external",
"summary": "RHBZ#2548809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-96238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96238"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96238",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96238"
}
],
"release_date": "2026-10-13T17:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-27T06:45:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89735"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:aspnetcore-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-runtime-dbg-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-sdk-dbg-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-targeting-pack-9.0-0:9.0.21-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet-templates-9.0-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-0:9.0.122-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:netstandard-targeting-pack-2.1-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-apphost-pack-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-host-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-hostfxr-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-runtime-9.0-debuginfo-0:9.0.21-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet-sdk-9.0-source-built-artifacts-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet-sdk-aot-9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debuginfo-0:9.0.122-1.el9_6.x86_64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.aarch64",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.ppc64le",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.s390x",
"CRB-9.6.0.Z.EUS:dotnet9.0-debugsource-0:9.0.122-1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.