Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat .NET 8.0 Security Update Affects System Integrity

published 4 months ago

Summary

A security update is available for .NET 8.0 on Red Hat systems. This update fixes a vulnerability that could allow an attacker to execute malicious code on the system. To stay secure, update your .NET 8.0 installation to the latest version as soon as possible.

What to do

Update redhat aspnetcore-runtime-8.0 to version 0:8.0.28-1.el10_0.
Update redhat aspnetcore-runtime-dbg-8.0 to version 0:8.0.28-1.el10_0.
Update redhat aspnetcore-targeting-pack-8.0 to version 0:8.0.28-1.el10_0.
Update redhat dotnet-apphost-pack-8.0 to version 0:8.0.28-1.el10_0.
Update redhat dotnet-apphost-pack-8.0-debuginfo to version 0:8.0.28-1.el10_0.
Update redhat dotnet-hostfxr-8.0 to version 0:8.0.28-1.el10_0.
Update redhat dotnet-hostfxr-8.0-debuginfo to version 0:8.0.28-1.el10_0.
Update redhat dotnet-runtime-8.0 to version 0:8.0.28-1.el10_0.
Update redhat dotnet-runtime-8.0-debuginfo to version 0:8.0.28-1.el10_0.
Update redhat dotnet-runtime-dbg-8.0 to version 0:8.0.28-1.el10_0.
Update redhat dotnet-sdk-8.0 to version 0:8.0.128-1.el10_0.
Update redhat dotnet-sdk-8.0-debuginfo to version 0:8.0.128-1.el10_0.
Update redhat dotnet-sdk-8.0-source-built-artifacts to version 0:8.0.128-1.el10_0.
Update redhat dotnet-sdk-dbg-8.0 to version 0:8.0.128-1.el10_0.
Update redhat dotnet-targeting-pack-8.0 to version 0:8.0.28-1.el10_0.
Update redhat dotnet-templates-8.0 to version 0:8.0.128-1.el10_0.
Update redhat dotnet8.0 to version 0:8.0.128-1.el10_0.
Update redhat dotnet8.0-debugsource to version 0:8.0.128-1.el10_0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux_eus:10.0	redhat	aspnetcore-runtime-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	aspnetcore-runtime-dbg-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	aspnetcore-targeting-pack-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-apphost-pack-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-apphost-pack-8.0-debuginfo	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-hostfxr-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-hostfxr-8.0-debuginfo	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-runtime-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-runtime-8.0-debuginfo	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-runtime-dbg-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-8.0	< 0:8.0.128-1.el10_0 Fix: upgrade to 0:8.0.128-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-8.0-debuginfo	< 0:8.0.128-1.el10_0 Fix: upgrade to 0:8.0.128-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-8.0-source-built-artifacts	< 0:8.0.128-1.el10_0 Fix: upgrade to 0:8.0.128-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-sdk-dbg-8.0	< 0:8.0.128-1.el10_0 Fix: upgrade to 0:8.0.128-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-targeting-pack-8.0	< 0:8.0.28-1.el10_0 Fix: upgrade to 0:8.0.28-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet-templates-8.0	< 0:8.0.128-1.el10_0 Fix: upgrade to 0:8.0.128-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet8.0	< 0:8.0.128-1.el10_0 Fix: upgrade to 0:8.0.128-1.el10_0
Red Hat:enterprise_linux_eus:10.0	redhat	dotnet8.0-debugsource	< 0:8.0.128-1.el10_0 Fix: upgrade to 0:8.0.128-1.el10_0

Original advisory text

Red Hat Security Advisory: .NET 8.0 security update

References

https://access.redhat.com/errata/RHSA-2026:28007 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487164 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487224 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28007.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-45491 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-45491 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-45491 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-45591 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-45591 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-45591 Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published23 Jun 2026

Updated24 Jun 2026

First seen24 Jun 2026

Sources

RHSA-2026:28007 · OSV

Track software like this

Free during beta