Fixed packages 23
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.0 | aspnetcore-runtime-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | aspnetcore-runtime-dbg-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | aspnetcore-targeting-pack-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-apphost-pack-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-apphost-pack-9.0-debuginfo | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-host | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-host-debuginfo | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-hostfxr-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-hostfxr-9.0-debuginfo | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-runtime-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-runtime-9.0-debuginfo | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-runtime-dbg-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-sdk-9.0 | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-sdk-9.0-debuginfo | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-sdk-9.0-source-built-artifacts | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-sdk-aot-9.0 | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-sdk-aot-9.0-debuginfo | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-sdk-dbg-9.0 | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-targeting-pack-9.0 | 0:9.0.5-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet-templates-9.0 | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet9.0 | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | dotnet9.0-debugsource | 0:9.0.106-1.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | netstandard-targeting-pack-2.1 | 0:9.0.106-1.el10_0 |
Vulnerabilities 1
-
High 8.0
.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2365317
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7601.json
-
report
https://access.redhat.com/security/cve/CVE-2025-26646
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-26646
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-26646
-
article
https://github.com/dotnet/announcements/issues/356