Red Hat Product Errata RHSA-2026:25114 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25114 - Security Advisory Overview Updated Packages Synopsis Important: .NET 10.0 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for .NET 10.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es): dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2487164 - CVE-2026-45491 dotnet: .NET: Local file tampering via link following vulnerability BZ - 2487224 - CVE-2026-45591 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption CVEs CVE-2026-45491 CVE-2026-45591 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM dotnet10.0-10.0.109-1.el8_10.src.rpm SHA-256: 87cc3f3ce9b1914f407c8d42ca5faf80f9a6d596ad116dba57e4673fa09f8ea7 x86_64 aspnetcore-runtime-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: ecbaa2fbb2120938b4e572095116b90ea52cc91f267eb0822ae9cba7ab130a6c aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: b80919463f040f932d5d8c475adad8739d2a7c2396e3dfb074d704078e91f7c8 aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: 6906e539af0be5fd7cc2033ef8215520845a687557740f80d8311d5baffa64db dotnet-10.0.109-1.el8_10.x86_64.rpm SHA-256: 0bde006e445839915416c7d6204a9a4c4e991759229bd9dfe9293a9efb96f37b dotnet-apphost-pack-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: 47773f9a63501ce328f4c2f897daeaa0ba288fe1051d820164755feb4d5ff151 dotnet-apphost-pack-10.0-debuginfo-10.0.9-1.el8_10.x86_64.rpm SHA-256: aa58aff97b7e66b03ebfb977b856f61c0349aadd3fd5ce435055944591cfdb6e dotnet-host-10.0.9-1.el8_10.x86_64.rpm SHA-256: 8c2d747660434811ab5656219d7efc9e277d40e47505fa364fbec9428ec281b2 dotnet-host-debuginfo-10.0.9-1.el8_10.x86_64.rpm SHA-256: ad6fffb0daef3b4d104fb68e58f6e8ffd47a1a80da3951338a4dfdc48617d75c dotnet-hostfxr-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: a3cfda4bcfffa74f231593ec72ddb986193d23b3abdf4d1ae69867abe8a274d8 dotnet-hostfxr-10.0-debuginfo-10.0.9-1.el8_10.x86_64.rpm SHA-256: 16a80a3ede0b0d282632962e378c38764d47d3b7b425c975019a5979293fa244 dotnet-runtime-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: ece99d2287b6724c1463834651554a22b3d7fd9197dabe001f78746dcbac8ed6 dotnet-runtime-10.0-debuginfo-10.0.9-1.el8_10.x86_64.rpm SHA-256: 82d9dc2268c920b588935ae04f717e072cd1a9951dcb4c7bee1001d4bc7fe3ea dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: f5bb6582166f8fd1d49c571590f8b23609b673df8d68a05c0344593c5c45cc07 dotnet-sdk-10.0-10.0.109-1.el8_10.x86_64.rpm SHA-256: 46fefdfb141eaddf483fb873cbb77c5f7ae44ba7ab2ffafdef4bcec63465c114 dotnet-sdk-10.0-debuginfo-10.0.109-1.el8_10.x86_64.rpm SHA-256: a99031fb7e0bffd5efe91b9c4dae8ee4612c1f34931174817286461fa3369dbc dotnet-sdk-aot-10.0-10.0.109-1.el8_10.x86_64.rpm SHA-256: 04afe5347117ca156725d4c65169c4b25f40d407cd54c9ca325ba7b48c679a50 dotnet-sdk-aot-10.0-debuginfo-10.0.109-1.el8_10.x86_64.rpm SHA-256: fc787db5ae6dac9c31c3725647a023805af47f88af4287c79870ce216c859e14 dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.x86_64.rpm SHA-256: 454162b0495aa166411f032507d294bbe1b3b65fe2ced3228de6cc2f8490eafc dotnet-targeting-pack-10.0-10.0.9-1.el8_10.x86_64.rpm SHA-256: f22fd3abec8de9f98a055e54f680877f2a2f6c3fab6ade8972cef9d470a6f547 dotnet-templates-10.0-10.0.109-1.el8_10.x86_64.rpm SHA-256: cc99e0528c0a3f51b104f0683d244a482068c958a52c3bb00c884ade8e105189 dotnet10.0-debuginfo-10.0.109-1.el8_10.x86_64.rpm SHA-256: 5208bec2662baf777d14d503d5c5b89deb36a9cd68b09bab9727770a0554a3b0 dotnet10.0-debugsource-10.0.109-1.el8_10.x86_64.rpm SHA-256: 5e38b36d46864e7b893d6bd66cf9d3ac37b24e8821a0cc5045ee9f4899de9ead Red Hat Enterprise Linux for IBM z Systems 8 SRPM dotnet10.0-10.0.109-1.el8_10.src.rpm SHA-256: 87cc3f3ce9b1914f407c8d42ca5faf80f9a6d596ad116dba57e4673fa09f8ea7 s390x aspnetcore-runtime-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: 7c4e39b80a59e729b6442cfbcbceb5465bbb007426468e0a205f509f57fba6b1 aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: 9e70a4ef5400602910c77e576f279358b7670447159f3c0e24996c9b6c5639f0 aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: 8a598cca5831dd789eac40cbf429d1df7fa66572a68b0cdf34c61d0578e5f5c2 dotnet-10.0.109-1.el8_10.s390x.rpm SHA-256: 52ed2b924ba8913c1b7e8b2980b4bae630bcd784480240a9798e712a7bdb15ce dotnet-apphost-pack-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: 8bb7925de67b7b407602fa4b3cb4814964917784ba8c3f15e8db509e903b0a93 dotnet-apphost-pack-10.0-debuginfo-10.0.9-1.el8_10.s390x.rpm SHA-256: 7beb522c895f566d4a846c93c12eea26a435328bb87c357e7f753406cdf93546 dotnet-host-10.0.9-1.el8_10.s390x.rpm SHA-256: 0c70ddedee12fe1233d0e74474758ac9d99b15460645a8c0febf6b4c1fcaa533 dotnet-host-debuginfo-10.0.9-1.el8_10.s390x.rpm SHA-256: 3363650ad2e19b43f7ecf8682dbed52e661b9f079b0d7e075341576185bf346e dotnet-hostfxr-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: 4be6f2344592f7043b955767d9fa8df4c0dea711035f43a8b4a0a5c8ec7cd0c2 dotnet-hostfxr-10.0-debuginfo-10.0.9-1.el8_10.s390x.rpm SHA-256: 622156256dfcdd0f17ae25ddcc318bc8c69303c4075f596e3e8511505011daf0 dotnet-runtime-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: 4ff8d22cee85429dbd44c465de715e0291cb805319e580866d0589358f023863 dotnet-runtime-10.0-debuginfo-10.0.9-1.el8_10.s390x.rpm SHA-256: f3a2ed44e758eac1af6646d396be96a5783a1f1fe338f2a4bc2a889cb02490f2 dotnet-runtime-dbg-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: c42d6f57f152a9fdcc66562d825a74a0dc08f895fe4aa69e84a810f120377e7d dotnet-sdk-10.0-10.0.109-1.el8_10.s390x.rpm SHA-256: c08caec71517e7ba7c14b0b6ff55901f3e397debe69d72cada241a7b2be2feae dotnet-sdk-10.0-debuginfo-10.0.109-1.el8_10.s390x.rpm SHA-256: ecce2da45ba5edd8326a38f39ed6cc73e87deced6b1ff3a648436bcaad9156f9 dotnet-sdk-dbg-10.0-10.0.109-1.el8_10.s390x.rpm SHA-256: e2dc993e71ba0be24fc88a128040be1a0625c0622f5aaa0135131fb630b1de53 dotnet-targeting-pack-10.0-10.0.9-1.el8_10.s390x.rpm SHA-256: 7e7675d67ed541f893b7976bbc3d5a9251af6b5b3669823b8e1f883bc7bf1243 dotnet-templates-10.0-10.0.109-1.el8_10.s390x.rpm SHA-256: 1d0ad9ecfa39b83898f21685b808ebc41dd7001784a94b6ed55ca0936f342824 dotnet10.0-debuginfo-10.0.109-1.el8_10.s390x.rpm SHA-256: 0708c1a53fe12acb69016117332bcfa1f7044866254edac81c6336fec0a7f53f dotnet10.0-debugsource-10.0.109-1.el8_10.s390x.rpm SHA-256: b543f4e48afb0053282c943c8be0f85a868eca9a732a7dccc899ab1b28e6508d Red Hat Enterprise Linux for Power, little endian 8 SRPM dotnet10.0-10.0.109-1.el8_10.src.rpm SHA-256: 87cc3f3ce9b1914f407c8d42ca5faf80f9a6d596ad116dba57e4673fa09f8ea7 ppc64le aspnetcore-runtime-10.0-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 522be2d075522246602a492b8ef1f06642b309485a6edc853d46d15eea583639 aspnetcore-runtime-dbg-10.0-10.0.9-1.el8_10.ppc64le.rpm SHA-256: bc177f2d36b427f0fa680682dca4695d78b9ee89a08d2a7e62a4671a2c899831 aspnetcore-targeting-pack-10.0-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 6ff9f7c4390be2189eb48aed34e5448ca6a4239c82c8273e79b3aeb8e41d675b dotnet-10.0.109-1.el8_10.ppc64le.rpm SHA-256: 46a35413454233227a8197c8bed00e377cb78c1f83bfa15e3b381982a2e48d66 dotnet-apphost-pack-10.0-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 973947756eff950bdb2f21f2e42da81e6f8174a86b2b0ead787a4797e4e0314f dotnet-apphost-pack-10.0-debuginfo-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 877b3209bf5df2fa3f4e9ed0ccb9f00353d572baaed438e1b362cb053ca4f394 dotnet-host-10.0.9-1.el8_10.ppc64le.rpm SHA-256: d163e592f352a686a49429a26aefe7c91f897507f970497cb5389b4279154e4b dotnet-host-debuginfo-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 06f41be0b27c29e3293d651d11e32063e5468401a675ef57272a4a91b8b48d69 dotnet-hostfxr-10.0-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 0220c542a5c855b45b92429fc3f0d7ca0ab889528954be507ce5959d03b4de50 dotnet-hostfxr-10.0-debuginfo-10.0.9-1.el8_10.ppc64le.rpm SHA-256: c62b387b8f51b2228a97ad96afc4ec2fcfca67e1b48945376c209b3198cb6f58 dotnet-runtime-10.0-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 6616742cb033025c96c9653e3fd803ed26bdd73183ddbe4a6c8b17dfafdc5c64 dotnet-runtime-10.0-debuginfo-10.0.9-1.el8_10.ppc64le.rpm SHA-256: 422bf9c2aca84022ff9bf66bb7a18fb56b3a685e9ba8e68d43e0e51667faa2cf dotnet-runtime-