Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:18256 | Mondoo Vulnerability Intelligence

RHSA-2025:18256

HIGH8.5

Red Hat Security Advisory: .NET 8.0 security update

Published Oct 21, 2025

Modified 4 weeks ago

Fix available

Affected Packages

Red Hat:rhel_eus:9.4::appstreamaspnetcore-runtime-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamaspnetcore-runtime-dbg-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamaspnetcore-targeting-pack-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-apphost-pack-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-apphost-pack-8.0-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-host

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-host-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-hostfxr-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-hostfxr-8.0-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-runtime-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-runtime-8.0-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-runtime-dbg-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-sdk-8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-sdk-8.0-debuginfo

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-sdk-8.0-source-built-artifacts

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-sdk-dbg-8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-targeting-pack-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet-templates-8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet8.0-debuginfo

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamdotnet8.0-debugsource

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::appstreamnetstandard-targeting-pack-2.1

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbaspnetcore-runtime-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbaspnetcore-runtime-dbg-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbaspnetcore-targeting-pack-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-apphost-pack-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-apphost-pack-8.0-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-host

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-host-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-hostfxr-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-hostfxr-8.0-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-runtime-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-runtime-8.0-debuginfo

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-runtime-dbg-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-sdk-8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-sdk-8.0-debuginfo

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-sdk-8.0-source-built-artifacts

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-sdk-dbg-8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-targeting-pack-8.0

Fixed in:

0:8.0.21-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet-templates-8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet8.0

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet8.0-debuginfo

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbdotnet8.0-debugsource

Fixed in:

0:8.0.121-1.el9_4

Red Hat:rhel_eus:9.4::crbnetstandard-targeting-pack-2.1

Fixed in:

0:8.0.121-1.el9_4

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:18256 REPORThttps://access.redhat.com/security/cve/CVE-2025-55247 REPORThttps://access.redhat.com/security/cve/CVE-2025-55248 REPORThttps://access.redhat.com/security/cve/CVE-2025-55315 ARTICLEhttps://access.redhat.com/security/updates/classification/#important REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2403083 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2403085 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2403086 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-55247 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-55248 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-55315 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_18256.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-55247 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-55248 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-55315

CVSS Analysis

CVSS v3.1

8.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

LowI:L

Availability

NoneA:N

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Upstream

CVE-2025-55247 CVE-2025-55248 CVE-2025-55315

Ecosystems

Red Hat rhel_eus 9.4 appstream Red Hat rhel_eus 9.4 crb

Timeline

PublishedOct 21, 2025

ModifiedDec 16, 2025