.NET's emergency updates require rebuilding bundled runtimes
Microsoft fixes Brotli and Linux tarball ownership flaws, plus two incomplete October patches. A host update leaves self-contained applications and older containers unchanged.
Dependencies
musl's regex flaw exposes programs that accept untrusted patterns
A musl patch fixes integer overflows when compiling regular expressions. Exposure depends on who supplies the pattern, and static binaries need their own rebuild.