Red Hat Product Errata RHSA-2026:25110 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25110 - Security Advisory Overview Updated Packages Synopsis Important: .NET 8.0 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for .NET 8.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es): dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491) dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2487164 - CVE-2026-45491 dotnet: .NET: Local file tampering via link following vulnerability BZ - 2487224 - CVE-2026-45591 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption CVEs CVE-2026-45491 CVE-2026-45591 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM dotnet8.0-8.0.128-1.el8_10.src.rpm SHA-256: cd5be9972775436ed2756e7995ead691d1c4af2d0404c7b6708d631c4da28932 x86_64 aspnetcore-runtime-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: 88547894688dd551212a933893e01589330a1a8b45e17a926fcc30354ff57e11 aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: 981bf65f179b6b2b4ad09851c441064685c8df4e458a39528dee1655cd41257d aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: 2895e5f7582dfa676856de9bb015aca2dcfcb06b816a3897eb645c2a1bf7e4ad dotnet-apphost-pack-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: d4efbf9325bb1671eba24279b29c5e24104bf62aabe6a3b6ac99869019b8202f dotnet-apphost-pack-8.0-debuginfo-8.0.28-1.el8_10.x86_64.rpm SHA-256: 2d20a359589272280563d9b4f19bb69155755b3e592a4c9ac6097f095a755f85 dotnet-hostfxr-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: 55861e4abcd580d94317a42bb139f60b3968d93e122a863d5f4a188728a6fac7 dotnet-hostfxr-8.0-debuginfo-8.0.28-1.el8_10.x86_64.rpm SHA-256: f23e2362853d5647c26e86fadbd3eb8b23aff862cc1328c6868856318395d272 dotnet-runtime-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: 77d474214f1a507c60298b1f500656df68460d1af62c41357c7ddae5d631c63e dotnet-runtime-8.0-debuginfo-8.0.28-1.el8_10.x86_64.rpm SHA-256: c4d5be0bca52da16c38495119d0af08206e90c5498253cca32d691c654f91fb8 dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: e7e684ecc835545d979a344405ff90815a64bd81bc975427e9222a1b5c6e7d08 dotnet-sdk-8.0-8.0.128-1.el8_10.x86_64.rpm SHA-256: 92efbfcac53813afdfcde12d20ad8a7ebbd725d9a3a468a84784a8846c88894a dotnet-sdk-8.0-debuginfo-8.0.128-1.el8_10.x86_64.rpm SHA-256: 727d94b92730fa637e09763cd80308db4f1e8aa394f1027cc0ffacfe7b51540f dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.x86_64.rpm SHA-256: 559b5ed5797e007dcfc22ef0ad2180252074de42230a5aa020a23fd72d37b375 dotnet-targeting-pack-8.0-8.0.28-1.el8_10.x86_64.rpm SHA-256: bb44c399ac1e49fcb2c7d3791469f339c914ba99822c6409fc534c64b265b543 dotnet-templates-8.0-8.0.128-1.el8_10.x86_64.rpm SHA-256: 5eb230786095033c5247d5e4149acd2f7930b987780aa3fde0070c0c0bd360b2 dotnet8.0-debuginfo-8.0.128-1.el8_10.x86_64.rpm SHA-256: c7f9b4de6f23c537b975a5c0ad23a7c1383afad25bf254e69b4433aa2db75d64 dotnet8.0-debugsource-8.0.128-1.el8_10.x86_64.rpm SHA-256: 889b1712c0fc4a49b3b50dfe9492500dcf5596d450fc82152c5936b0831347ed Red Hat Enterprise Linux for IBM z Systems 8 SRPM dotnet8.0-8.0.128-1.el8_10.src.rpm SHA-256: cd5be9972775436ed2756e7995ead691d1c4af2d0404c7b6708d631c4da28932 s390x aspnetcore-runtime-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: 3196c6cd5ba72f0b48804aab3680b0e850b2111189d9abd7977e130ca2b94e65 aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: dabd36248a85967445f9b41e7b3717610e890d2bb1e8dc8200d8040385854d95 aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: 83e4ad1407baa8cc0cf7a5f8a347a7c5ce410efb8d667e08061093f45809c054 dotnet-apphost-pack-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: c3c670fca204f3b0268d8fe0cd89adbda6cce0a5e16720e0b34df0a687b20ef2 dotnet-apphost-pack-8.0-debuginfo-8.0.28-1.el8_10.s390x.rpm SHA-256: 75afc146d0aa54b6e9b564918efea8acad3903cd4fbde94e5a07dfa96ffa2784 dotnet-hostfxr-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: c314dccd6d3e20a1b3b7115580733521d82416096fc55f287c9421f3fd15a925 dotnet-hostfxr-8.0-debuginfo-8.0.28-1.el8_10.s390x.rpm SHA-256: 662d2bb8e22a368ae921536f8394516da4860234bcfeb06ff2402c6240aeba66 dotnet-runtime-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: cf86e5b37f11cd80b33a9427eb803f596278ea7007c23e50c495243db2f942f2 dotnet-runtime-8.0-debuginfo-8.0.28-1.el8_10.s390x.rpm SHA-256: 3d7e6eb4b2cf85ae65526254d72e235bd12aafe823951af9db685424df619265 dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: 1c55322eb6d9eab924bc0ffa98d86fc4bb6537a28c4d5f82f78c3fedaced5584 dotnet-sdk-8.0-8.0.128-1.el8_10.s390x.rpm SHA-256: e7efa424cdb753fe28dbca1b4285f2169f13480943b1d7c12d6922b1f6af9775 dotnet-sdk-8.0-debuginfo-8.0.128-1.el8_10.s390x.rpm SHA-256: 636a691deea28b4674b29f27e2fd1f9180f26ec644148810f2e8c6cb3127f8ed dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.s390x.rpm SHA-256: cd94b944d6c54b360134becb8fb100529b42cf62800ea14af26351cc5c8f4188 dotnet-targeting-pack-8.0-8.0.28-1.el8_10.s390x.rpm SHA-256: 684edecc63e3b250d0db1e08843b4162e586148a82dcd0b684f735a047955dfd dotnet-templates-8.0-8.0.128-1.el8_10.s390x.rpm SHA-256: b459481c98b46f3dd4cfbc4b46e9e8449a69e12a178eb6815041c90c84fc64c9 dotnet8.0-debuginfo-8.0.128-1.el8_10.s390x.rpm SHA-256: a34ce1141903012e59c20997cd0a6131dcca51954a54585b6af1824fd9721d46 dotnet8.0-debugsource-8.0.128-1.el8_10.s390x.rpm SHA-256: bc32e3b11289a0b9a7091c9af02212c998a6b4c48aa48ccd812f1da0611cfdc2 Red Hat Enterprise Linux for Power, little endian 8 SRPM dotnet8.0-8.0.128-1.el8_10.src.rpm SHA-256: cd5be9972775436ed2756e7995ead691d1c4af2d0404c7b6708d631c4da28932 ppc64le aspnetcore-runtime-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: 32a80b0098a3c9cc6d731c4d5160eded21f33f563e6eabfc247ae4a68ab66e58 aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: e8613755955a03a1f2e13d2957563219c39f9a317fa59f4da7d1469611c7394e aspnetcore-targeting-pack-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: e8b99dd3655bb8da1a13b1907e68710163d44b0b81a51368016d5b1764ccc296 dotnet-apphost-pack-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: be774b66c7f2f1589294e31e60e6517228722d28a935c73133f78aca983d8647 dotnet-apphost-pack-8.0-debuginfo-8.0.28-1.el8_10.ppc64le.rpm SHA-256: 858a17f8a6b9adcecf5c0505420cb1a2a5281ef628525ec8b6e3aaa937b8bef3 dotnet-hostfxr-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: 6a255dcb534265d5d86bacc67963d6d8f7470678902256cb6d9cd72ac882ed5a dotnet-hostfxr-8.0-debuginfo-8.0.28-1.el8_10.ppc64le.rpm SHA-256: 7a0f2666e85ee44ac7e8c00eb5b2c68924f3a1fd5056cd42c2af3e48ade1930b dotnet-runtime-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: f5863d85a6aeedeab3f2aa54e1f19f82aa5fb40e8e7c7d113da6e552b44f0b15 dotnet-runtime-8.0-debuginfo-8.0.28-1.el8_10.ppc64le.rpm SHA-256: 8dd51c2e954ba5771c1d61a69dd8545c0e7bd0b8ab3c588d430c26e98615f4b6 dotnet-runtime-dbg-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: 6aa43216e7ab03dc21216810e8fa3675a5d12b2de2abcfc42edf3c1932d9554e dotnet-sdk-8.0-8.0.128-1.el8_10.ppc64le.rpm SHA-256: 27b37e5eba7c2c5804cf89fb07c14c876b63c6caeea2ab61f7e7b03539f405f1 dotnet-sdk-8.0-debuginfo-8.0.128-1.el8_10.ppc64le.rpm SHA-256: fa0d36bbfff27cc0a64d345c00c2edb4dc07d89d4474ce9892df702aec90db58 dotnet-sdk-dbg-8.0-8.0.128-1.el8_10.ppc64le.rpm SHA-256: 7ac81274404c38f61f0a91c0bca5b49563fef6751fbafba44ada477efb887ec6 dotnet-targeting-pack-8.0-8.0.28-1.el8_10.ppc64le.rpm SHA-256: 4ea4894472d7b545c25ab82a50341564c0737a8e645ea6b0e2319d9b52d3052e dotnet-templates-8.0-8.0.128-1.el8_10.ppc64le.rpm SHA-256: 98424a37aecc50a312c67c803988bc0cc61037169b4c1b30a52ae7062b88869e dotnet8.0-debuginfo-8.0.128-1.el8_10.ppc64le.rpm SHA-256: 9c81451b9bfd1506f86e1b5df6ad963b54164fa1b9298085098d87a60eb24879 dotnet8.0-debugsource-8.0.128-1.el8_10.ppc64le.rpm SHA-256: cb9bd678f1a38f979b1d87e03a026eaf71b993179692d9e3472608e56f2762f8 Red Hat Enterprise Linux for ARM 64 8 SRPM dotnet8.0-8.0.128-1.el8_10.src.rpm SHA-256: cd5be9972775436ed2756e7995ead691d1c4af2d0404c7b6708d631c4da28932 aarch64 aspnetcore-runtime-8.0-8.0.28-1.el8_10.aarch64.rpm SHA-256: 474feb8ceb5ce2604028d2345e9cc1628924136b6e7f69100a5ee83661ffeb17 aspnetcore-runtime-dbg-8.0-8.0.28-1.el8_10.aarch64.rpm SHA-256: 19fc26fdfee97bfc371cb9afca41106