{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft.AspNetCore.Authentication.Negotiate: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--microsoft-aspnetcore-authentication-negotiate/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--microsoft-aspnetcore-authentication-negotiate/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · disclosed",
   "content_text": "Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.Authentication.Negotiate 10.0.13, Microsoft.AspNetCore.Authentication.Negotiate 8.0.32, Microsoft.AspNetCore.Authentication.Negotiate 9.0.21.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70179/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70179/",
   "title": "CVE-2026-70179 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:26Z"
  }
 ]
}