Red Hat Product Errata RHSA-2026:24334 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24334 - Security Advisory Overview Updated Packages Synopsis Important: .NET 8.0 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es): serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043) dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2453284 - CVE-2026-34043 serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization BZ - 2476605 - CVE-2026-42899 dotnet: .NET: infinite loop allows an attacker to cause a denial of service CVEs CVE-2026-34043 CVE-2026-42899 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM dotnet8.0-8.0.127-1.el9_4.src.rpm SHA-256: 4628e13f920bc2b098da05af32d474075efd75f7b51ffe0221d6c26423b73a22 x86_64 aspnetcore-runtime-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: c6b254406c0b676a876a7c76bab6772755733f6e84d4814ce638eda8ea048847 aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 05a4e21dac19f4c6c01c75e1fb951265d06bc6a73e6e2f391e2acb876cb0f5f8 aspnetcore-targeting-pack-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 24db2d62d349eeed2bbe866f984cdabbfc71b5a015bee209d6af42c9a5d1668c dotnet-apphost-pack-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 44457f6b033440c993cf0b95e3ec5dd9435fa2ad9d9590af1e2d2b7ed69f2a82 dotnet-apphost-pack-8.0-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: e39be5d25ae997cad02282b6dc34c59f8b1beb9121de2907130b196d0780d09d dotnet-host-8.0.27-1.el9_4.x86_64.rpm SHA-256: 1da72a849d630b8aa9f0cbf480f641faadb7ab071cb0d702c0a6519cc4c041fd dotnet-host-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: 9bb2f370f23d38220b36aa45c0cae45b138363161db8df1c973460c9c3661387 dotnet-hostfxr-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 396581e55c27f3a2c6ff88d5aec63e6de965993f2e38977ec292d65e48aeb3ff dotnet-hostfxr-8.0-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: b47121e02ccfec0dab3bf9c234a00109bf154b42c79e75b288cc40b151f08edd dotnet-runtime-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 21b1b66cbe1e4d4c6d74f9833a8cf0482e9dffdcaf44a82e043ee044fc0b0154 dotnet-runtime-8.0-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: 6e0b447a3fea7315efacf5d166093349fadd591264207cb82847aff85972aed4 dotnet-runtime-dbg-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 88f85daef503e4cd7afe3592c71b311c4f58fed66525c1a5f870422567ba41c1 dotnet-sdk-8.0-8.0.127-1.el9_4.x86_64.rpm SHA-256: a914222aab3706989e08d411456aa50911d425c178f49ff1b7ac9205ae77419c dotnet-sdk-8.0-debuginfo-8.0.127-1.el9_4.x86_64.rpm SHA-256: 5afe8c985d8d238b44ac63151e21f5a5ce17a26ffe8c489216cc77053cd395df dotnet-sdk-dbg-8.0-8.0.127-1.el9_4.x86_64.rpm SHA-256: deda47c91919aa252df02545242295079054570547a3bef08d042369e04a1066 dotnet-targeting-pack-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 079376bf528a6cda394e64958ee3e095143aa5177a9ff77c4a7a232c4191c330 dotnet-templates-8.0-8.0.127-1.el9_4.x86_64.rpm SHA-256: 22c7d38f94f209cce98e6547f3d47d57e1c8e2804879f4544b086f7075b864ef dotnet8.0-debuginfo-8.0.127-1.el9_4.x86_64.rpm SHA-256: 524f76d1b6b004fb176358d1df5758e126052de47b122ae4384e9183962d9b9e dotnet8.0-debugsource-8.0.127-1.el9_4.x86_64.rpm SHA-256: 87a4f16b88d728da752e58418000d9e4f5d3d4114f5d607854187088618b84f4 netstandard-targeting-pack-2.1-8.0.127-1.el9_4.x86_64.rpm SHA-256: 8ba21d7fdd92a0321085722ad5711339c1b23cced28075a2e614fb6e74b28777 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM dotnet8.0-8.0.127-1.el9_4.src.rpm SHA-256: 4628e13f920bc2b098da05af32d474075efd75f7b51ffe0221d6c26423b73a22 ppc64le aspnetcore-runtime-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 0f1e6ebe96ec668ba54ce34650ebbe9d788c7e0e6ad29301826dbd863e5a73e0 aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 1486fd3eac617f10f01103a9f9a9d82a34c37218c68c1eaa2585d01f3f80df42 aspnetcore-targeting-pack-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 718557131efce9412f8240e058cb72d03a1c5c2a399a9319dd7826d1aab648d3 dotnet-apphost-pack-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: b3d2d39541dda2f218cd64a412e163b8670b9a0f895ace460390d1e2e53b674a dotnet-apphost-pack-8.0-debuginfo-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 3d6992cf45f523f886afa358de51e1368eda3eec4140bb2276f5edd82f1b8dbb dotnet-host-8.0.27-1.el9_4.ppc64le.rpm SHA-256: d39836a63cf65aeea5a33f269d93f4aaf13d7f187ef0271e8ae84a416d572006 dotnet-host-debuginfo-8.0.27-1.el9_4.ppc64le.rpm SHA-256: cbfbf275336b1808baf6a511528347691afa0d1980c9f8335e249802160f8ca5 dotnet-hostfxr-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 06c7720b7dd24bdd6ae253c17de8af5bfdc51d5babd24efa4fab7d0cbe5d37ed dotnet-hostfxr-8.0-debuginfo-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 1a25d11c0ea5793a09c5acaf37d2e857823dd850e717e307c6cf9bced29469ee dotnet-runtime-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 9bfc0cae7952e965e0cacd04ca36ee159eda6ffe24a2f919250dfc0938b6cece dotnet-runtime-8.0-debuginfo-8.0.27-1.el9_4.ppc64le.rpm SHA-256: cb3b9ddfe229983a650f231dd480e8760d5c8c0d8fcb52badfc70c5e0f369f15 dotnet-runtime-dbg-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 875b7aabf368e0e20cae95827e38a0cebbd4eee38fbd13032707a9168d7ae014 dotnet-sdk-8.0-8.0.127-1.el9_4.ppc64le.rpm SHA-256: ebd5cf65d0ae255440285a852279216059b841d4a57494b65392c8a51f0c8347 dotnet-sdk-8.0-debuginfo-8.0.127-1.el9_4.ppc64le.rpm SHA-256: 0c2c2bc8a231e456b3b7cb264dd71532bb2eb0c556898025a4d4d1a6318319b8 dotnet-sdk-dbg-8.0-8.0.127-1.el9_4.ppc64le.rpm SHA-256: 53aaa4c9bf7478675a362396785240d731a884296d2c21386b2e600c213db46e dotnet-targeting-pack-8.0-8.0.27-1.el9_4.ppc64le.rpm SHA-256: 55d1adfbacf3ecf37eb32c466f6bb2f791a98f98a9782c95de54c096bb339609 dotnet-templates-8.0-8.0.127-1.el9_4.ppc64le.rpm SHA-256: a72f664e56b2774d0410fbe13f134c3a9d449387ee685433390c5c988406c4f0 dotnet8.0-debuginfo-8.0.127-1.el9_4.ppc64le.rpm SHA-256: 842d8efa9d04740a0b9bdc30e676e1b30fafe52c250e7bce0810a77c0f1b0b4f dotnet8.0-debugsource-8.0.127-1.el9_4.ppc64le.rpm SHA-256: 84785e9370d82598c8875dd46f7031e1b138d35d9eabac8c3a2b5345206cd08c netstandard-targeting-pack-2.1-8.0.127-1.el9_4.ppc64le.rpm SHA-256: 72df2a80f35deecaca2a0f511634e737a39053fcdd7ea82259d40024a93ecb8d Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM dotnet8.0-8.0.127-1.el9_4.src.rpm SHA-256: 4628e13f920bc2b098da05af32d474075efd75f7b51ffe0221d6c26423b73a22 x86_64 aspnetcore-runtime-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: c6b254406c0b676a876a7c76bab6772755733f6e84d4814ce638eda8ea048847 aspnetcore-runtime-dbg-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 05a4e21dac19f4c6c01c75e1fb951265d06bc6a73e6e2f391e2acb876cb0f5f8 aspnetcore-targeting-pack-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 24db2d62d349eeed2bbe866f984cdabbfc71b5a015bee209d6af42c9a5d1668c dotnet-apphost-pack-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 44457f6b033440c993cf0b95e3ec5dd9435fa2ad9d9590af1e2d2b7ed69f2a82 dotnet-apphost-pack-8.0-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: e39be5d25ae997cad02282b6dc34c59f8b1beb9121de2907130b196d0780d09d dotnet-host-8.0.27-1.el9_4.x86_64.rpm SHA-256: 1da72a849d630b8aa9f0cbf480f641faadb7ab071cb0d702c0a6519cc4c041fd dotnet-host-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: 9bb2f370f23d38220b36aa45c0cae45b138363161db8df1c973460c9c3661387 dotnet-hostfxr-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 396581e55c27f3a2c6ff88d5aec63e6de965993f2e38977ec292d65e48aeb3ff dotnet-hostfxr-8.0-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: b47121e02ccfec0dab3bf9c234a00109bf154b42c79e75b288cc40b151f08edd dotnet-runtime-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 21b1b66cbe1e4d4c6d74f9833a8cf0482e9dffdcaf44a82e043ee044fc0b0154 dotnet-runtime-8.0-debuginfo-8.0.27-1.el9_4.x86_64.rpm SHA-256: 6e0b447a3fea7315efacf5d166093349fadd591264207cb82847aff85972aed4 dotnet-runtime-dbg-8.0-8.0.27-1.el9_4.x86_64.rpm SHA-256: 88f85daef503e4cd7afe3592c71b311c4f58fed66525c1a5f870422567ba41c1 dotnet-sdk-8.0-8.0.127-1.el9_4.x86_64.rpm SHA-256: a914222aab3706989e08d411456aa50911d425c178f49ff1b7ac9205ae77419c dotnet-sdk-8.0-debuginfo-8.0.127-1.el9_4.x86_64.rpm SHA-2