{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* CVE-2026-50659: detect CR/LF line endings across write buffers in\n System.Net.Mime.EightBitStream — an SMTP DATA dot-stuffing /\n header-injection spoofing gap when a CRLF is split over two writes.\n - debian/patches/CVE-2026-50659.patch: backport of upstream\n dotnet/runtime commit 5c8ca0d6 (\"Fix CRLF encoding in\n EightBitStream\", 2026-04-09, PR #60066). Tracks a\n _lastWriteEndedWithCr flag across writes and factors the per-byte\n scan into a new EncodeLines() helper so a boundary-split CRLF is\n dot-stuffed correctly. The flush-on-close part follows main's\n version of the fix (6e0eb8307f): Close() override plus\n base.DisposeAsync(), because on .NET 7 DelegatedStream.Close()\n never reaches Dispose(bool), which would leave the 8.0 variant's\n override dead. The two regression theories from 6e0eb8307f are\n ported to EightBitStreamTest.cs. Additive; no public surface\n change. net6\n 6.0.36 backport is byte-identical to the upstream added code.\n - CVE-2026-50659\n * CVE-2026-62899: reject Content-Length values above long.MaxValue in the\n managed HttpListener instead of treating them as 0 — HTTP request\n smuggling (CWE-444).\n - debian/patches/CVE-2026-62899.patch: backport of upstream\n dotnet/runtime commit e2844c3b (PR #62798, release/8.0, 2026-07-13).\n HttpListenerRequest.Managed.cs AddHeader replaces the permissive\n ulong parse with strict long.TryParse(NumberStyles.None,\n InvariantCulture) and rejects the request on failure. Upstream\n regression tests ported. Additive; no public surface change.\n Cross-checked against the net6 6.0.36 backport.\n - CVE-2026-62899\n * CVE-2026-62900: SourceLink leaked credentials embedded in git remote\n URLs (e.g. access tokens in https://user:token@host/...) into the\n RepositoryUrl / SourceLink metadata of built assemblies and NuGet\n packages (information disclosure). Affects the sourcelink 1.2.0\n sources built into the dotnet7 SDK.\n - debian/patches/CVE-2026-62900.patch: backport of upstream\n dotnet/sourcelink commit cc896b0983ea (\"Strip user name and\n password from repository URLs\", #1761, 2026-08-12).\n GitOperations.NormalizeUrl now strips user info from every\n normalized URL (password always removed, SSH user name replaced\n with the \"git\" placeholder); the legacy Azure DevOps v1/v2 hosted\n SSH URL format (which used the SSH user name as the account name)\n is retired via a new isUnsupportedFormat flag and a\n NotSupportedException with the new RemoteUrlFormatNoLongerSupported\n resource (mirrored into all 13 xlf files). Core code paths\n byte-identical to upstream; the replaced public TryParseHostedSsh\n signature is kept as a forwarding overload per patch-engine rules;\n unit tests ported, integration-test changes N/A (project not built\n in source-build). 20 files.\n - CVE-2026-62900", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_docker/debian12/advisories/2026/clsa-2026_1791970890.json" } ], "tracking": { "current_release_date": "2026-10-14T09:44:31Z", "generator": { "date": "2026-10-14T09:44:31Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791970890", "initial_release_date": "2026-10-14T09:44:31Z", "revision_history": [ { "date": "2026-10-14T09:44:31Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 18 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 12", "product": { "name": "Debian 12", "product_id": "Debian-12", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:12:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els27?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els6?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els5?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els4?arch=amd64&os_name=debian&os_version=12" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els27?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els6?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els5?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-apphost-pack-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-templates-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-runtime-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-host-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-hostfxr-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-targeting-pack-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0-source-built-artifacts@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netstandard-targeting-pack-2.1-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/aspnetcore-targeting-pack-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-sdk-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } }, { "category": "product_version", "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_id": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/dotnet7-runtime-7.0@7.0.120-1%2Btuxcare.els4?arch=arm64&os_name=debian&os_version=12" } } } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "relates_to_product_reference": "Debian-12" }, { "category": "default_component_of", "full_product_name": { "name": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64 as a component of Debian 12", "product_id": "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64" }, "product_reference": "dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "relates_to_product_reference": "Debian-12" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-47304", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "notes": [ { "category": "description", "text": "Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-47304" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304" } ], "release_date": "2026-07-14T19:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T19:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-62901", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "description", "text": "Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-62901" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901" } ], "release_date": "2026-08-11T17:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-08-11T17:18:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-57108", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "description", "text": "Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-57108" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108" } ], "release_date": "2026-07-14T18:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T18:18:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-47302", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-47302" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302" } ], "release_date": "2026-07-14T19:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T19:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-62900", "cwe": { "id": "CWE-212", "name": "Improper Removal of Sensitive Information Before Storage or Transfer" }, "notes": [ { "category": "description", "text": "Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-62900" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900" } ], "release_date": "2026-08-11T17:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-08-11T17:18:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-62899", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" }, "notes": [ { "category": "description", "text": "Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-62899" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899" } ], "release_date": "2026-08-11T17:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-08-11T17:18:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50527", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-50527" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527" } ], "release_date": "2026-07-14T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T20:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50524", "cwe": { "id": "CWE-1287", "name": "Improper Validation of Specified Type of Input" }, "notes": [ { "category": "description", "text": "Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-50524" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524" } ], "release_date": "2026-07-14T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T20:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50648", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-50648" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648" } ], "release_date": "2026-07-14T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T20:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50659", "cwe": { "id": "CWE-116", "name": "Improper Encoding or Escaping of Output" }, "notes": [ { "category": "description", "text": "Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-50659" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659" } ], "release_date": "2026-07-14T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T20:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50525", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-50525" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525" } ], "release_date": "2026-07-14T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T20:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-45591", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-45591" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17527", "url": "https://access.redhat.com/errata/RHSA-2026:17527" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25110", "url": "https://access.redhat.com/errata/RHSA-2026:25110" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25111", "url": "https://access.redhat.com/errata/RHSA-2026:25111" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25112", "url": "https://access.redhat.com/errata/RHSA-2026:25112" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25113", "url": "https://access.redhat.com/errata/RHSA-2026:25113" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25114", "url": "https://access.redhat.com/errata/RHSA-2026:25114" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25115", "url": "https://access.redhat.com/errata/RHSA-2026:25115" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25220", "url": "https://access.redhat.com/errata/RHSA-2026:25220" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25221", "url": "https://access.redhat.com/errata/RHSA-2026:25221" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25222", "url": "https://access.redhat.com/errata/RHSA-2026:25222" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26638", "url": "https://access.redhat.com/errata/RHSA-2026:26638" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26994", "url": "https://access.redhat.com/errata/RHSA-2026:26994" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28007", "url": "https://access.redhat.com/errata/RHSA-2026:28007" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28009", "url": "https://access.redhat.com/errata/RHSA-2026:28009" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28011", "url": "https://access.redhat.com/errata/RHSA-2026:28011" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28051", "url": "https://access.redhat.com/errata/RHSA-2026:28051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28227", "url": "https://access.redhat.com/errata/RHSA-2026:28227" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-45591", "url": "https://access.redhat.com/security/cve/CVE-2026-45591" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487224" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45591.json" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-62909", "cwe": { "id": "CWE-252", "name": "Unchecked Return Value" }, "notes": [ { "category": "description", "text": "Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-62909" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909" } ], "release_date": "2026-08-11T17:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-08-11T17:18:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-25667", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for HTTP/3 Encoder/Decoder stream processing.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-25667" }, { "category": "external", "summary": "https://github.com/IsaJafarov/Kestrel-DoS", "url": "https://github.com/IsaJafarov/Kestrel-DoS" }, { "category": "external", "summary": "https://github.com/IsaJafarov/Q3Fuzz", "url": "https://github.com/IsaJafarov/Q3Fuzz" }, { "category": "external", "summary": "https://github.com/dotnet/aspnetcore/commit/96ccc40a0e095424b19506e8268b9b1a3e23d6a7#diff-667d5b3693f93a0f706ab211428998b210862f9b885d917104d2013118312626", "url": "https://github.com/dotnet/aspnetcore/commit/96ccc40a0e095424b19506e8268b9b1a3e23d6a7#diff-667d5b3693f93a0f706ab211428998b210862f9b885d917104d2013118312626" } ], "release_date": "2026-03-19T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-03-19T19:16:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50651", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-50651" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651" } ], "release_date": "2026-07-14T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T20:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-21173", "cwe": { "id": "CWE-379", "name": "Creation of Temporary File in Directory with Insecure Permissions" }, "notes": [ { "category": "description", "text": ".NET Elevation of Privilege Vulnerability", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2025-21173" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21173", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21173" }, { "category": "external", "summary": "https://www.herodevs.com/vulnerability-directory/cve-2025-21173", "url": "https://www.herodevs.com/vulnerability-directory/cve-2025-21173" } ], "release_date": "2025-01-14T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2025-01-14T18:15:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50528", "cwe": { "id": "CWE-302", "name": "Authentication Bypass by Assumed-Immutable Data" }, "notes": [ { "category": "description", "text": "Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-50528" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528" } ], "release_date": "2026-07-14T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-07-14T20:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-45491", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access ('Link Following')" }, "notes": [ { "category": "description", "text": "Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "known_affected": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-docker/cve/CVE-2026-45491" }, { "category": "external", "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T09:41:31.706918Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els27.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els27.arm64" ], "url": "https://cve.tuxcare.com/els-docker/releases/CLSA-2026:1791970890" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:aspnetcore-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-apphost-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-host-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-hostfxr-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-runtime-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-sdk-7.0-source-built-artifacts-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-targeting-pack-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:dotnet7-templates-7.0-0:7.0.120-1+tuxcare.els6.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els4.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els5.arm64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.amd64", "Debian-12:netstandard-targeting-pack-2.1-7.0-0:7.0.120-1+tuxcare.els6.arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }