Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aspnetcore-runtime-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aspnetcore-runtime-dbg-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aspnetcore-targeting-pack-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-apphost-pack-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-apphost-pack-8.0-debuginfo | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-hostfxr-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-hostfxr-8.0-debuginfo | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-runtime-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-runtime-8.0-debuginfo | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-runtime-dbg-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-8.0 | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-8.0-debuginfo | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-dbg-8.0 | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-targeting-pack-8.0 | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-templates-8.0 | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet8.0 | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet8.0-debuginfo | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet8.0-debugsource | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-apphost-pack-8.0-debuginfo | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-hostfxr-8.0-debuginfo | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-runtime-8.0-debuginfo | 0:8.0.12-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-sdk-8.0-debuginfo | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-sdk-8.0-source-built-artifacts | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet8.0-debuginfo | 0:8.0.112-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet8.0-debugsource | 0:8.0.112-1.el8_10 |
Vulnerabilities 4
-
High 8.8
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
-
High 7.5
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
-
High 7.3
.NET Elevation of Privilege Vulnerability
.NET Elevation of Privilege Vulnerability
-
Medium 5.4
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code …
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2337893
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2337926
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2337927
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0381.json
-
report
https://access.redhat.com/security/cve/CVE-2024-11831
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2312579
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-11831
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11831
-
article
https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e
-
article
https://github.com/yahoo/serialize-javascript/pull/173
-
report
https://access.redhat.com/security/cve/CVE-2025-21172
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-21172
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-21172
-
article
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21172
-
report
https://access.redhat.com/security/cve/CVE-2025-21173
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-21173
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-21173
-
article
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21173
-
report
https://access.redhat.com/security/cve/CVE-2025-21176
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-21176
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-21176
-
article
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21176