Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability.