RHSA-2026:41896

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2026:41896

Import Source

https://security.access.redhat.com/data/osv/RHSA-2026:41896.json

JSON Data

https://api.osv.dev/v1/vulns/RHSA-2026:41896

Upstream

CVE-2026-47300

CVE-2026-47302

CVE-2026-47303

CVE-2026-47304

CVE-2026-50524

CVE-2026-50525

CVE-2026-50526

CVE-2026-50527

CVE-2026-50528

CVE-2026-50646

CVE-2026-50648

CVE-2026-50649

CVE-2026-50650

CVE-2026-50651

CVE-2026-50659

CVE-2026-56170

CVE-2026-57108

Published

2026-07-23T10:13:40Z

Modified

2026-07-23T10:32:27.827215961Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Details

References

Affected packages

Red Hat:enterprise_linux:9::appstream

aspnetcore-runtime-9.0

Package

Name: aspnetcore-runtime-9.0
Purl: pkg:rpm/redhat/aspnetcore-runtime-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

aspnetcore-runtime-dbg-9.0

Package

Name: aspnetcore-runtime-dbg-9.0
Purl: pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

aspnetcore-targeting-pack-9.0

Package

Name: aspnetcore-targeting-pack-9.0
Purl: pkg:rpm/redhat/aspnetcore-targeting-pack-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-apphost-pack-9.0

Package

Name: dotnet-apphost-pack-9.0
Purl: pkg:rpm/redhat/dotnet-apphost-pack-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-apphost-pack-9.0-debuginfo

Package

Name: dotnet-apphost-pack-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-hostfxr-9.0

Package

Name: dotnet-hostfxr-9.0
Purl: pkg:rpm/redhat/dotnet-hostfxr-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-hostfxr-9.0-debuginfo

Package

Name: dotnet-hostfxr-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-runtime-9.0

Package

Name: dotnet-runtime-9.0
Purl: pkg:rpm/redhat/dotnet-runtime-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-runtime-9.0-debuginfo

Package

Name: dotnet-runtime-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-runtime-dbg-9.0

Package

Name: dotnet-runtime-dbg-9.0
Purl: pkg:rpm/redhat/dotnet-runtime-dbg-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-9.0

Package

Name: dotnet-sdk-9.0
Purl: pkg:rpm/redhat/dotnet-sdk-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-9.0-debuginfo

Package

Name: dotnet-sdk-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-aot-9.0

Package

Name: dotnet-sdk-aot-9.0
Purl: pkg:rpm/redhat/dotnet-sdk-aot-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-aot-9.0-debuginfo

Package

Name: dotnet-sdk-aot-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-dbg-9.0

Package

Name: dotnet-sdk-dbg-9.0
Purl: pkg:rpm/redhat/dotnet-sdk-dbg-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-targeting-pack-9.0

Package

Name: dotnet-targeting-pack-9.0
Purl: pkg:rpm/redhat/dotnet-targeting-pack-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-templates-9.0

Package

Name: dotnet-templates-9.0
Purl: pkg:rpm/redhat/dotnet-templates-9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet9.0

Package

Name: dotnet9.0
Purl: pkg:rpm/redhat/dotnet9.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet9.0-debuginfo

Package

Name: dotnet9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet9.0-debugsource

Package

Name: dotnet9.0-debugsource
Purl: pkg:rpm/redhat/dotnet9.0-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

netstandard-targeting-pack-2.1

Package

Name: netstandard-targeting-pack-2.1
Purl: pkg:rpm/redhat/netstandard-targeting-pack-2.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

Red Hat:enterprise_linux:9::crb

dotnet-apphost-pack-9.0-debuginfo

Package

Name: dotnet-apphost-pack-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-hostfxr-9.0-debuginfo

Package

Name: dotnet-hostfxr-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-runtime-9.0-debuginfo

Package

Name: dotnet-runtime-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.18-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-9.0-debuginfo

Package

Name: dotnet-sdk-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-9.0-source-built-artifacts

Package

Name: dotnet-sdk-9.0-source-built-artifacts
Purl: pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet-sdk-aot-9.0-debuginfo

Package

Name: dotnet-sdk-aot-9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet9.0-debuginfo

Package

Name: dotnet9.0-debuginfo
Purl: pkg:rpm/redhat/dotnet9.0-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"

dotnet9.0-debugsource

Package

Name: dotnet9.0-debugsource
Purl: pkg:rpm/redhat/dotnet9.0-debugsource

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:9.0.119-1.el9_8

Database specific

source

"https://security.access.redhat.com/data/osv/RHSA-2026:41896.json"