Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 1

Vulnerabilities 8

• Critical 9.9
  CVE-2025-55315 Public exploit EPSS 67%

  ASP.NET Security Feature Bypass Vulnerability

  Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 Microsoft Visual Studio 2022 version 17.10 Ubuntu Alpine Wolfi NuGet
  Oct 14, 2025
• High 8.0
  CVE-2025-26646

  .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability

  External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu Alpine Wolfi NuGet
  May 13, 2025
• High 7.5
  CVE-2026-26171

  .NET Denial of Service Vulnerability

  Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

  Microsoft .NET 8.0 .NET 9.0 PowerShell 7.5 Ubuntu Alpine Wolfi NuGet
  Apr 14, 2026
• High 7.5
  CVE-2026-32178

  .NET Spoofing Vulnerability

  Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu Alpine Wolfi NuGet
  Apr 14, 2026
• High 7.5
  CVE-2026-32203

  .NET and Visual Studio Denial of Service Vulnerability

  Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu NuGet
  Apr 14, 2026
• High 7.5
  CVE-2026-33116

  .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

  Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine Wolfi NuGet
  Apr 14, 2026
• High 7.3
  CVE-2025-55247

  .NET Elevation of Privilege Vulnerability

  Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  Microsoft .NET 8.0 .NET 9.0 dotnet7 Ubuntu Alpine NuGet
  Oct 14, 2025
• Medium 4.8
  CVE-2025-55248

  .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

  Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine Wolfi NuGet
  Oct 14, 2025

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2025-55315
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2025-55248
• report
  https://access.redhat.com/security/cve/CVE-2025-55247
• report
  https://access.redhat.com/security/cve/CVE-2025-26646
• report
  https://access.redhat.com/security/cve/CVE-2026-32178
• report
  https://access.redhat.com/security/cve/CVE-2026-33116
• report
  https://access.redhat.com/security/cve/CVE-2026-32203
• report
  https://access.redhat.com/security/cve/CVE-2026-26171
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9205.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2365317
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-26646
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-26646
• article
  https://github.com/dotnet/announcements/issues/356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2403086
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-55247
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-55247
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2403083
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-55248
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-55248
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2403085
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-55315
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-55315
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457739
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-26171
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-26171
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457781
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-32178
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-32178
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457740
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-32203
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-32203
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457741
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-33116
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-33116