Red Hat Security Advisory

RHSA-2026:93455

.NET 8.0 security update

Released 2026-11-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) aspnetcore-runtime-8.0-8.0.33-1.el10_0, aspnetcore-runtime-dbg-8.0-8.0.33-1.el10_0, aspnetcore-targeting-pack-8.0-8.0.33-1.el10_0 +9
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) dotnet-sdk-8.0-source-built-artifacts-8.0.133-1.el10_0

Fixes 2 records

TI-2026-79288 CVE-2026-111497 · GHSA-9v8h-qqgm-4m35

Out-of-bounds write in Google Brotli decoder

CRITICAL 99KEV

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.82641 Published 2026-10-22 Partial fix · 1.0.10, 1.1.1 +2 CWE-252

TI-2026-82582 CVE-2026-114148

Incorrect default permissions in ASP.NET Core allow local escalation

LOW 36

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00355 Published 2026-10-29 Partial fix · 10.0.403, 11.0.100-rc.3 +4 CWE-276