Red Hat Product Errata RHSA-2026:25111 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25111 - Security Advisory Overview Updated Packages Synopsis Important: .NET 8.0 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es): dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2487164 - CVE-2026-45491 dotnet: .NET: Local file tampering via link following vulnerability BZ - 2487224 - CVE-2026-45591 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption CVEs CVE-2026-45491 CVE-2026-45591 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM dotnet8.0-8.0.128-1.el10_2.src.rpm SHA-256: 6b23b405f620ca20d982315b7d9bfe60c664c2c8799b178a59fdb5418fd921e9 x86_64 aspnetcore-runtime-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: d20669b2e1f636a581f3ad2e0db6f9fce7ec93a950577d2f6daac440310a2468 aspnetcore-runtime-dbg-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 99305ed8415e71ee9ce6e325932969f76c0797f65941c09bb46ba70bcd56a7e6 aspnetcore-targeting-pack-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: a797a0b5cb6de11df53be5d4de53ac72c0208057f1c32e0d710c7433c3ac4edc dotnet-apphost-pack-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 4428274625157a7375a09dd80f18d9ea2296c55396e25cf8b5a5c5b31aad1327 dotnet-apphost-pack-8.0-debuginfo-8.0.28-1.el10_2.x86_64.rpm SHA-256: c1403d17cf69f1b360bbafc7daecfe5a1e0368421f2a39a46585d893b6b6f454 dotnet-hostfxr-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 46497a50229c34c200a98b7807a95ef20ccc3af87a0bd0e15e8c02649e6b3889 dotnet-hostfxr-8.0-debuginfo-8.0.28-1.el10_2.x86_64.rpm SHA-256: 3b840c02f4ce0c1dc653185a4bdd0e2b6516a0f8078a73c05beec59ab37b80f9 dotnet-runtime-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: e83e396243c59fab7482188f54e49bbc2e626ede1e9ea6bf769869ec4bcb3d39 dotnet-runtime-8.0-debuginfo-8.0.28-1.el10_2.x86_64.rpm SHA-256: 0d2ba204fe89a74741bef7cce4483e86f54ba03fc04fa9ef2885be294324c353 dotnet-runtime-dbg-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 174cc14bffc28c6dc1cb3373f3ccb2e2179b3c9ddb7be38150f3f3f61d446101 dotnet-sdk-8.0-8.0.128-1.el10_2.x86_64.rpm SHA-256: 4bd48e58f15a77003610bccf58fb0961d561e715c6b03ff228bf2fb5d8d66368 dotnet-sdk-8.0-debuginfo-8.0.128-1.el10_2.x86_64.rpm SHA-256: 2fb9c0222acf868c5c6677f0ad681603726547d927435b333be66e95fe02557c dotnet-sdk-dbg-8.0-8.0.128-1.el10_2.x86_64.rpm SHA-256: c0e654e783e1984a9e71dcdd3d3de86edaca40ebae22f2926ac13a2d9f7089c0 dotnet-targeting-pack-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 9f0f6600ea9afed5567afc23fa3bdc51c0ff739e8365125a43377ce8b4803de3 dotnet-templates-8.0-8.0.128-1.el10_2.x86_64.rpm SHA-256: bda7ab72de897974eac32b2fe3bd07ce8a3086c23efb59d6d624acc775d84713 dotnet8.0-debugsource-8.0.128-1.el10_2.x86_64.rpm SHA-256: e303c6f4b43e185ee1457e08e24436e9242ea4f12f59d7c49f44cddf5df19903 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM dotnet8.0-8.0.128-1.el10_2.src.rpm SHA-256: 6b23b405f620ca20d982315b7d9bfe60c664c2c8799b178a59fdb5418fd921e9 x86_64 aspnetcore-runtime-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: d20669b2e1f636a581f3ad2e0db6f9fce7ec93a950577d2f6daac440310a2468 aspnetcore-runtime-dbg-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 99305ed8415e71ee9ce6e325932969f76c0797f65941c09bb46ba70bcd56a7e6 aspnetcore-targeting-pack-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: a797a0b5cb6de11df53be5d4de53ac72c0208057f1c32e0d710c7433c3ac4edc dotnet-apphost-pack-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 4428274625157a7375a09dd80f18d9ea2296c55396e25cf8b5a5c5b31aad1327 dotnet-apphost-pack-8.0-debuginfo-8.0.28-1.el10_2.x86_64.rpm SHA-256: c1403d17cf69f1b360bbafc7daecfe5a1e0368421f2a39a46585d893b6b6f454 dotnet-hostfxr-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 46497a50229c34c200a98b7807a95ef20ccc3af87a0bd0e15e8c02649e6b3889 dotnet-hostfxr-8.0-debuginfo-8.0.28-1.el10_2.x86_64.rpm SHA-256: 3b840c02f4ce0c1dc653185a4bdd0e2b6516a0f8078a73c05beec59ab37b80f9 dotnet-runtime-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: e83e396243c59fab7482188f54e49bbc2e626ede1e9ea6bf769869ec4bcb3d39 dotnet-runtime-8.0-debuginfo-8.0.28-1.el10_2.x86_64.rpm SHA-256: 0d2ba204fe89a74741bef7cce4483e86f54ba03fc04fa9ef2885be294324c353 dotnet-runtime-dbg-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 174cc14bffc28c6dc1cb3373f3ccb2e2179b3c9ddb7be38150f3f3f61d446101 dotnet-sdk-8.0-8.0.128-1.el10_2.x86_64.rpm SHA-256: 4bd48e58f15a77003610bccf58fb0961d561e715c6b03ff228bf2fb5d8d66368 dotnet-sdk-8.0-debuginfo-8.0.128-1.el10_2.x86_64.rpm SHA-256: 2fb9c0222acf868c5c6677f0ad681603726547d927435b333be66e95fe02557c dotnet-sdk-dbg-8.0-8.0.128-1.el10_2.x86_64.rpm SHA-256: c0e654e783e1984a9e71dcdd3d3de86edaca40ebae22f2926ac13a2d9f7089c0 dotnet-targeting-pack-8.0-8.0.28-1.el10_2.x86_64.rpm SHA-256: 9f0f6600ea9afed5567afc23fa3bdc51c0ff739e8365125a43377ce8b4803de3 dotnet-templates-8.0-8.0.128-1.el10_2.x86_64.rpm SHA-256: bda7ab72de897974eac32b2fe3bd07ce8a3086c23efb59d6d624acc775d84713 dotnet8.0-debugsource-8.0.128-1.el10_2.x86_64.rpm SHA-256: e303c6f4b43e185ee1457e08e24436e9242ea4f12f59d7c49f44cddf5df19903 Red Hat Enterprise Linux for IBM z Systems 10 SRPM dotnet8.0-8.0.128-1.el10_2.src.rpm SHA-256: 6b23b405f620ca20d982315b7d9bfe60c664c2c8799b178a59fdb5418fd921e9 s390x aspnetcore-runtime-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: 466334baf43d088a4d0469d42d04a21f93a7c87ecb511fb3a7fe19dc5e0f720d aspnetcore-runtime-dbg-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: d9b9df64404b62ec20e34b034faf46e5c03f7e6f292e9070cd12027126087749 aspnetcore-targeting-pack-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: 4bbfb165d5ccade4c65ad876780879c6c586d8230ac821c9d18253437dfb36fc dotnet-apphost-pack-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: 0d6b67f352b0fdd08e8afcb9f00ff2c8dd8f109b2013a6a10dac02a87821e0af dotnet-apphost-pack-8.0-debuginfo-8.0.28-1.el10_2.s390x.rpm SHA-256: 293e1d1ced0a4481234aa3a5858b286e9edc6c37ddf7591e040437419ec14bed dotnet-hostfxr-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: e4d7377ecf7f4be27f4849e83b2e9236a5306ecb3f34b693fae5c54745ac92ec dotnet-hostfxr-8.0-debuginfo-8.0.28-1.el10_2.s390x.rpm SHA-256: d079d25344ca243c85f6a763d4565b357e17352d8b91d2e25611f3a7771af33b dotnet-runtime-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: dd9208c133a3b2971e523b828a5995f38d862d256f1e6335b3898805e69786e2 dotnet-runtime-8.0-debuginfo-8.0.28-1.el10_2.s390x.rpm SHA-256: 07ff09bf715484997111a910b6632088a19b397512d153c049a49f916c8c5f89 dotnet-runtime-dbg-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: 853907c5431ae6a67e0dbca413dfc3ab2220901324969a21dd0b5b3b9afcf76c dotnet-sdk-8.0-8.0.128-1.el10_2.s390x.rpm SHA-256: eac01ee2ec980790e70dc5939dbc6d62b4335d68d2eedd43e51a32ea1e012cee dotnet-sdk-8.0-debuginfo-8.0.128-1.el10_2.s390x.rpm SHA-256: efeedefa6fed91128173ab47741d78aee2412fd4484aa61634de9f07a5a9b1c3 dotnet-sdk-dbg-8.0-8.0.128-1.el10_2.s390x.rpm SHA-256: 537a4d1593040f6fa84eaa05506ea573e5001246067267e7ff631cf872a8a2a3 dotnet-targeting-pack-8.0-8.0.28-1.el10_2.s390x.rpm SHA-256: e7758792e0a0640ecdc21005370010b9c8717937a740baf836a181a6735c83a0 dotnet-templates-8.0