Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceRHSA-2026:42145

RHSA-2026:42145

HIGH8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 20, 2026

Modified 2 weeks ago

Fix available

Details

Details:

This update includes the following RPMs:

dotnet8.0:

aspnetcore-runtime-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
aspnetcore-runtime-dbg-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
aspnetcore-targeting-pack-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
dotnet-apphost-pack-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
dotnet-hostfxr-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
dotnet-runtime-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
dotnet-runtime-dbg-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
dotnet-sdk-8.0-8.0.129-2.1.hum1 (aarch64, x86_64)
dotnet-sdk-8.0-source-built-artifacts-8.0.129-2.1.hum1 (aarch64, x86_64)
dotnet-sdk-dbg-8.0-8.0.129-2.1.hum1 (aarch64, x86_64)
dotnet-targeting-pack-8.0-8.0.29-2.1.hum1 (aarch64, x86_64)
dotnet-templates-8.0-8.0.129-2.1.hum1 (aarch64, x86_64)
dotnet8.0-8.0.129-2.1.hum1.src (src)

Security Fix(es):

dotnet8.0:

CVE-2026-47304
CVE-2026-50646
CVE-2026-50649
CVE-2026-50650

Affected Packages

aspnetcore-runtime-8.0

Red Hat hummingbird 1

Fixed in:

0:8.0.29-2.1.hum1

dotnet8.0

Red Hat hummingbird 1

Fixed in:

0:8.0.129-2.1.hum1

References

https://access.redhat.com/errata/RHSA-2026:42145

https://access.redhat.com/security/cve/CVE-2026-47300

https://access.redhat.com/security/cve/CVE-2026-47302

https://access.redhat.com/security/cve/CVE-2026-47303

https://access.redhat.com/security/cve/CVE-2026-47304

https://access.redhat.com/security/cve/CVE-2026-50524

https://access.redhat.com/security/cve/CVE-2026-50525

https://access.redhat.com/security/cve/CVE-2026-50526

https://access.redhat.com/security/cve/CVE-2026-50527

https://access.redhat.com/security/cve/CVE-2026-50528

https://access.redhat.com/security/cve/CVE-2026-50646

https://access.redhat.com/security/cve/CVE-2026-50648

https://access.redhat.com/security/cve/CVE-2026-50649

https://access.redhat.com/security/cve/CVE-2026-50650

https://access.redhat.com/security/cve/CVE-2026-50651

https://access.redhat.com/security/cve/CVE-2026-50659

https://access.redhat.com/security/cve/CVE-2026-56170

https://access.redhat.com/security/cve/CVE-2026-57108

https://access.redhat.com/security/updates/classification/

https://images.redhat.com/

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42145.json

CVSS Analysis

CVSS v3.1

8.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2026-47300 CVE-2026-47302 CVE-2026-47303 CVE-2026-47304 CVE-2026-50524 CVE-2026-50525 CVE-2026-50526 CVE-2026-50527 CVE-2026-50528 CVE-2026-50646 CVE-2026-50648 CVE-2026-50649 CVE-2026-50650 CVE-2026-50651 CVE-2026-50659 CVE-2026-56170 CVE-2026-57108

Ecosystems

Red Hat hummingbird 1

Timeline

PublishedJul 20, 2026

ModifiedSep 6, 2026

RHSA-2026:42145 | Mondoo Vulnerability Intelligence