Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | aspnetcore-runtime-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | aspnetcore-runtime-dbg-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | aspnetcore-targeting-pack-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-apphost-pack-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-apphost-pack-8.0-debuginfo | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-hostfxr-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-hostfxr-8.0-debuginfo | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-runtime-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-runtime-8.0-debuginfo | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-runtime-dbg-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-sdk-8.0 | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-sdk-8.0-debuginfo | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-sdk-dbg-8.0 | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-targeting-pack-8.0 | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet-templates-8.0 | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet8.0 | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet8.0-debuginfo | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | dotnet8.0-debugsource | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-apphost-pack-8.0-debuginfo | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-hostfxr-8.0-debuginfo | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-runtime-8.0-debuginfo | 0:8.0.33-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-sdk-8.0-debuginfo | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet-sdk-8.0-source-built-artifacts | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet8.0-debuginfo | 0:8.0.133-1.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | dotnet8.0-debugsource | 0:8.0.133-1.el9_8 |
Vulnerabilities 2
-
Critical 9.2
Out-of-Bounds Write in Google Brotli Decoder
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …
KEV Oct 27, 2026 -
High 7.8CVE-2026-114148 Public exploit
ASP.NET Core Elevation of Privilege Vulnerability
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2558973
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2562054
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92492.json
-
report
https://access.redhat.com/security/cve/CVE-2026-111497
-
article
https://access.redhat.com/security/vulnerabilities/RHSB-2026-015
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-111497
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-111497
-
article
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
-
article
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
-
report
https://access.redhat.com/security/cve/CVE-2026-114148
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-114148
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-114148