Fixed packages 33
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aspnetcore-runtime-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aspnetcore-runtime-dbg-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aspnetcore-targeting-pack-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-apphost-pack-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-apphost-pack-9.0-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-host | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-host-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-hostfxr-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-hostfxr-9.0-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-runtime-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-runtime-9.0-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-runtime-dbg-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-9.0 | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-9.0-debuginfo | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-aot-9.0 | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-aot-9.0-debuginfo | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-sdk-dbg-9.0 | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-targeting-pack-9.0 | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet-templates-9.0 | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet9.0 | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet9.0-debuginfo | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | dotnet9.0-debugsource | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | netstandard-targeting-pack-2.1 | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-apphost-pack-9.0-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-host-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-hostfxr-9.0-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-runtime-9.0-debuginfo | 0:9.0.5-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-sdk-9.0-debuginfo | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-sdk-9.0-source-built-artifacts | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet-sdk-aot-9.0-debuginfo | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet9.0-debuginfo | 0:9.0.106-1.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | dotnet9.0-debugsource | 0:9.0.106-1.el8_10 |
Vulnerabilities 1
-
High 8.0
.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2365317
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7571.json
-
report
https://access.redhat.com/security/cve/CVE-2025-26646
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-26646
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-26646
-
article
https://github.com/dotnet/announcements/issues/356