Skip to content
Heist/ feed
Back to feed
HighFix available

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Type: advisorySources: OSV
Products
aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0, dotnet-apphost-pack-9.0, dotnet-apphost-pack-9.0-debuginfo, dotnet-host, dotnet-host-debuginfo, dotnet-hostfxr-9.0, dotnet-hostfxr-9.0-debuginfo, dotnet-runtime-9.0, dotnet-runtime-9.0-debuginfo, dotnet-runtime-dbg-9.0, dotnet-sdk-9.0, dotnet-sdk-9.0-debuginfo, dotnet-sdk-9.0-source-built-artifacts, dotnet-sdk-aot-9.0, dotnet-sdk-aot-9.0-debuginfo, dotnet-sdk-dbg-9.0, dotnet-targeting-pack-9.0, dotnet-templates-9.0, dotnet9.0, dotnet9.0-debugsource, netstandard-targeting-pack-2.1
Affected versions
Not specified
Fixed versions
0:9.0.120-1.el10_0, 0:9.0.19-1.el10_0
CVEs
CVE-2026-47300, CVE-2026-47302, CVE-2026-47303, CVE-2026-47304, CVE-2026-50524, CVE-2026-50525, CVE-2026-50526, CVE-2026-50527, CVE-2026-50528, CVE-2026-50646, CVE-2026-50648, CVE-2026-50649, CVE-2026-50650, CVE-2026-50651, CVE-2026-50659, CVE-2026-56170, CVE-2026-57108, CVE-2026-62899, CVE-2026-62900, CVE-2026-62901, CVE-2026-62909
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 00:15 UTC · Revision 1

Source evidence

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

core-osv · Original source

Published 24 Aug 2026, 10:18 UTC

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

osv:RHSA-2026:58567

aspnetcore-runtime-9.0

Fixed versions: 0:9.0.19-1.el10_0

aspnetcore-runtime-dbg-9.0

Fixed versions: 0:9.0.19-1.el10_0

aspnetcore-targeting-pack-9.0

Fixed versions: 0:9.0.19-1.el10_0

dotnet-apphost-pack-9.0

Fixed versions: 0:9.0.19-1.el10_0

dotnet-apphost-pack-9.0-debuginfo

Fixed versions: 0:9.0.19-1.el10_0

dotnet-host

Fixed versions: 0:9.0.19-1.el10_0

dotnet-host-debuginfo

Fixed versions: 0:9.0.19-1.el10_0

dotnet-hostfxr-9.0

Fixed versions: 0:9.0.19-1.el10_0

dotnet-hostfxr-9.0-debuginfo

Fixed versions: 0:9.0.19-1.el10_0

dotnet-runtime-9.0

Fixed versions: 0:9.0.19-1.el10_0

dotnet-runtime-9.0-debuginfo

Fixed versions: 0:9.0.19-1.el10_0

dotnet-runtime-dbg-9.0

Fixed versions: 0:9.0.19-1.el10_0

dotnet-sdk-9.0

Fixed versions: 0:9.0.120-1.el10_0

dotnet-sdk-9.0-debuginfo

Fixed versions: 0:9.0.120-1.el10_0

dotnet-sdk-aot-9.0

Fixed versions: 0:9.0.120-1.el10_0

dotnet-sdk-aot-9.0-debuginfo

Fixed versions: 0:9.0.120-1.el10_0

dotnet-sdk-dbg-9.0

Fixed versions: 0:9.0.120-1.el10_0

dotnet-targeting-pack-9.0

Fixed versions: 0:9.0.19-1.el10_0

dotnet-templates-9.0

Fixed versions: 0:9.0.120-1.el10_0

dotnet9.0

Fixed versions: 0:9.0.120-1.el10_0

dotnet9.0-debugsource

Fixed versions: 0:9.0.120-1.el10_0

netstandard-targeting-pack-2.1

Fixed versions: 0:9.0.120-1.el10_0

dotnet-sdk-9.0-source-built-artifacts

Fixed versions: 0:9.0.120-1.el10_0

Complete source record
{
  "id": "4e2abe5f72651d7b7f022cc55d4ba96b4104bf7ada11509521fd3d28220562bd",
  "url": "https://osv.dev/vulnerability/RHSA-2026%3A58567",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update",
    "summary": "Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update",
    "evidence": "osv:RHSA-2026:58567",
    "products": [
      {
        "name": {
          "value": "aspnetcore-runtime-9.0",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "aspnetcore-runtime-dbg-9.0",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "aspnetcore-targeting-pack-9.0",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-apphost-pack-9.0",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-apphost-pack-9.0-debuginfo",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-host",
          "evidence": "/affected/5/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/5/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-host-debuginfo",
          "evidence": "/affected/6/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/6/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-hostfxr-9.0",
          "evidence": "/affected/7/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/7/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-hostfxr-9.0-debuginfo",
          "evidence": "/affected/8/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/8/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-runtime-9.0",
          "evidence": "/affected/9/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/9/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-runtime-9.0-debuginfo",
          "evidence": "/affected/10/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/10/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-runtime-dbg-9.0",
          "evidence": "/affected/11/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/11/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-sdk-9.0",
          "evidence": "/affected/12/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/12/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-sdk-9.0-debuginfo",
          "evidence": "/affected/13/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/13/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-sdk-aot-9.0",
          "evidence": "/affected/14/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/14/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-sdk-aot-9.0-debuginfo",
          "evidence": "/affected/15/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/15/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-sdk-dbg-9.0",
          "evidence": "/affected/16/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/16/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-targeting-pack-9.0",
          "evidence": "/affected/17/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.19-1.el10_0",
            "evidence": "/affected/17/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-templates-9.0",
          "evidence": "/affected/18/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/18/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet9.0",
          "evidence": "/affected/19/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/19/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet9.0-debugsource",
          "evidence": "/affected/20/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/20/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "netstandard-targeting-pack-2.1",
          "evidence": "/affected/21/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/21/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "dotnet-sdk-9.0-source-built-artifacts",
          "evidence": "/affected/22/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:9.0.120-1.el10_0",
            "evidence": "/affected/22/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "RHSA-2026:58567",
      "aliases": [
        "RHSA-2026:58567"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "aspnetcore-runtime-9.0",
            "purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "aspnetcore-runtime-dbg-9.0",
            "purl": "pkg:rpm/redhat/aspnetcore-runtime-dbg-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "aspnetcore-targeting-pack-9.0",
            "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-apphost-pack-9.0",
            "purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-apphost-pack-9.0-debuginfo",
            "purl": "pkg:rpm/redhat/dotnet-apphost-pack-9.0-debuginfo",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-host",
            "purl": "pkg:rpm/redhat/dotnet-host",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-host-debuginfo",
            "purl": "pkg:rpm/redhat/dotnet-host-debuginfo",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-hostfxr-9.0",
            "purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-hostfxr-9.0-debuginfo",
            "purl": "pkg:rpm/redhat/dotnet-hostfxr-9.0-debuginfo",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-runtime-9.0",
            "purl": "pkg:rpm/redhat/dotnet-runtime-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-runtime-9.0-debuginfo",
            "purl": "pkg:rpm/redhat/dotnet-runtime-9.0-debuginfo",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-runtime-dbg-9.0",
            "purl": "pkg:rpm/redhat/dotnet-runtime-dbg-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-sdk-9.0",
            "purl": "pkg:rpm/redhat/dotnet-sdk-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-sdk-9.0-debuginfo",
            "purl": "pkg:rpm/redhat/dotnet-sdk-9.0-debuginfo",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-sdk-aot-9.0",
            "purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-sdk-aot-9.0-debuginfo",
            "purl": "pkg:rpm/redhat/dotnet-sdk-aot-9.0-debuginfo",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-sdk-dbg-9.0",
            "purl": "pkg:rpm/redhat/dotnet-sdk-dbg-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.19-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-targeting-pack-9.0",
            "purl": "pkg:rpm/redhat/dotnet-targeting-pack-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-templates-9.0",
            "purl": "pkg:rpm/redhat/dotnet-templates-9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet9.0",
            "purl": "pkg:rpm/redhat/dotnet9.0",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet9.0-debugsource",
            "purl": "pkg:rpm/redhat/dotnet9.0-debugsource",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "netstandard-targeting-pack-2.1",
            "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:9.0.120-1.el10_0"
                }
              ]
            }
          ],
          "package": {
            "name": "dotnet-sdk-9.0-source-built-artifacts",
            "purl": "pkg:rpm/redhat/dotnet-sdk-9.0-source-built-artifacts",
            "ecosystem": "Red Hat:enterprise_linux_eus:10.0"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:58567.json"
          }
        }
      ],
      "modified": "2026-10-17T10:16:17Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-47300",
        "CVE-2026-47302",
        "CVE-2026-47303",
        "CVE-2026-47304",
        "CVE-2026-50524",
        "CVE-2026-50525",
        "CVE-2026-50526",
        "CVE-2026-50527",
        "CVE-2026-50528",
        "CVE-2026-50646",
        "CVE-2026-50648",
        "CVE-2026-50649",
        "CVE-2026-50650",
        "CVE-2026-50651",
        "CVE-2026-50659",
        "CVE-2026-56170",
        "CVE-2026-57108",
        "CVE-2026-62899",
        "CVE-2026-62900",
        "CVE-2026-62901",
        "CVE-2026-62909"
      ],
      "references": [
        "https://access.redhat.com/errata/RHSA-2026:58567",
        "https://access.redhat.com/security/updates/classification/#important",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2499217",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500109",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500189",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500492",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500502",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500509",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500515",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500556",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500562",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500563",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500565",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500577",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500580",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500581",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500587",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500589",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2500593",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2512175",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2512179",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2512180",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2512185",
        "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58567.json",
        "https://access.redhat.com/security/cve/CVE-2026-47300",
        "https://www.cve.org/CVERecord?id=CVE-2026-47300",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-47300",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300",
        "https://access.redhat.com/security/cve/CVE-2026-47302",
        "https://www.cve.org/CVERecord?id=CVE-2026-47302",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-47302",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302",
        "https://access.redhat.com/security/cve/CVE-2026-47303",
        "https://www.cve.org/CVERecord?id=CVE-2026-47303",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-47303",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303",
        "https://access.redhat.com/security/cve/CVE-2026-47304",
        "https://www.cve.org/CVERecord?id=CVE-2026-47304",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-47304",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304",
        "https://access.redhat.com/security/cve/CVE-2026-50524",
        "https://www.cve.org/CVERecord?id=CVE-2026-50524",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50524",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524",
        "https://access.redhat.com/security/cve/CVE-2026-50525",
        "https://www.cve.org/CVERecord?id=CVE-2026-50525",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50525",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525",
        "https://access.redhat.com/security/cve/CVE-2026-50526",
        "https://www.cve.org/CVERecord?id=CVE-2026-50526",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50526",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526",
        "https://access.redhat.com/security/cve/CVE-2026-50527",
        "https://www.cve.org/CVERecord?id=CVE-2026-50527",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50527",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527",
        "https://access.redhat.com/security/cve/CVE-2026-50528",
        "https://www.cve.org/CVERecord?id=CVE-2026-50528",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50528",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528",
        "https://access.redhat.com/security/cve/CVE-2026-50646",
        "https://www.cve.org/CVERecord?id=CVE-2026-50646",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50646",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646",
        "https://access.redhat.com/security/cve/CVE-2026-50648",
        "https://www.cve.org/CVERecord?id=CVE-2026-50648",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50648",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648",
        "https://access.redhat.com/security/cve/CVE-2026-50649",
        "https://www.cve.org/CVERecord?id=CVE-2026-50649",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50649",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649",
        "https://access.redhat.com/security/cve/CVE-2026-50650",
        "https://www.cve.org/CVERecord?id=CVE-2026-50650",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50650",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650",
        "https://access.redhat.com/security/cve/CVE-2026-50651",
        "https://www.cve.org/CVERecord?id=CVE-2026-50651",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50651",
        "https://access.redhat.com/security/cve/CVE-2026-50659",
        "https://www.cve.org/CVERecord?id=CVE-2026-50659",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-50659",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659",
        "https://access.redhat.com/security/cve/CVE-2026-56170",
        "https://www.cve.org/CVERecord?id=CVE-2026-56170",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-56170",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170",
        "https://access.redhat.com/security/cve/CVE-2026-57108",
        "https://www.cve.org/CVERecord?id=CVE-2026-57108",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-57108",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108",
        "https://access.redhat.com/security/cve/CVE-2026-62899",
        "https://www.cve.org/CVERecord?id=CVE-2026-62899",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-62899",
        "https://access.redhat.com/security/cve/CVE-2026-62900",
        "https://www.cve.org/CVERecord?id=CVE-2026-62900",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-62900",
        "https://access.redhat.com/security/cve/CVE-2026-62901",
        "https://www.cve.org/CVERecord?id=CVE-2026-62901",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-62901",
        "https://access.redhat.com/security/cve/CVE-2026-62909",
        "https://www.cve.org/CVERecord?id=CVE-2026-62909",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-62909"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-47300",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-47302",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-47303",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-47304",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50524",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50525",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50526",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50527",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50528",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50646",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50648",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50649",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50650",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50651",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-50659",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-56170",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-57108",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-62899",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-62900",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-62901",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-62909",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 353003,
  "published_at": "2026-08-24T10:18:43+00:00"
}