RHSA-2026:99885: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Nov 12, 2026

Updated

Red Hat Hardened Images RPMs bug fix and enhancement update

Other sources

This update includes the following RPMs:dotnet10.0: aspnetcore-runtime-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) aspnetcore-runtime-dbg-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) aspnetcore-targeting-pack-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) dotnet-apphost-pack-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) dotnet-host-10.0.15-1.hum1 (aarch64, s390x, x8664) dotnet-hostfxr-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) dotnet-runtime-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) dotnet-runtime-dbg-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) dotnet-sdk-10.0-10.0.115-1.hum1 (aarch64, s390x, x8664) dotnet-sdk-10.0-source-built-artifacts-10.0.115-1.hum1 (aarch64, s390x, x8664) dotnet-sdk-aot-10.0-10.0.115-1.hum1 (aarch64, x8664) dotnet-sdk-dbg-10.0-10.0.115-1.hum1 (aarch64, s390x, x8664) dotnet-targeting-pack-10.0-10.0.15-1.hum1 (aarch64, s390x, x8664) dotnet-templates-10.0-10.0.115-1.hum1 (aarch64, s390x, x8664) dotnet10.0-10.0.115-1.hum1.src (src)

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat Hardened Images

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade aspnetcore-runtime-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade aspnetcore-runtime-dbg-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade aspnetcore-targeting-pack-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade dotnet-apphost-pack-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade dotnet-host to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade dotnet-hostfxr-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade dotnet-runtime-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade dotnet-runtime-dbg-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade dotnet-sdk-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.115-1.hum1
Upgrade
Upgrade dotnet-sdk-10.0-source-built-artifacts to a version that resolves this vulnerability.
Fixed in 10.0.115-1.hum1
Upgrade
Upgrade dotnet-sdk-aot-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.115-1.hum1
Upgrade
Upgrade dotnet-sdk-dbg-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.115-1.hum1
Upgrade
Upgrade dotnet-targeting-pack-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.15-1.hum1
Upgrade
Upgrade dotnet-templates-10.0 to a version that resolves this vulnerability.
Fixed in 10.0.115-1.hum1

Event History

Nov 12, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·09:12 PM

Data Sourced

via Red Hat·09:12 PM

Severity

Frequently Asked Questions

Which components and architectures are included in this update?

The update covers .NET 10 runtime, host, hostfxr, ASP.NET Core runtime, SDK, targeting packs, templates, debug packages, and related source-built artifacts. Most packages are available for aarch64, s390x, and x86_64; the dotnet-sdk-aot package is listed only for aarch64 and x86_64.

What package versions indicate that the updated .NET 10 components are installed?

Runtime-related packages are updated to 10.0.15-1.hum1, while SDK-related packages, templates, and source-built artifacts are updated to 10.0.115-1.hum1. The source RPM is dotnet10.0-10.0.115-1.hum1.src.