Red Hat Product Errata RHSA-2026:4451 - Security Advisory
Issued:
2026-03-12
Updated:
2026-03-12

RHSA-2026:4451 - Security Advisory

Synopsis

Important: .NET 8.0 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es):

  • asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

  • BZ - 2446134 - CVE-2026-26130 asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation

Red Hat Enterprise Linux for x86_64 10

SRPM
dotnet8.0-8.0.125-1.el10_1.src.rpm SHA-256: 4f8fd7b7533a5645e29407251f71dc5648b804b35c952063a8e5a0f443ccc2a3
x86_64
aspnetcore-runtime-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: fd971cb7cdee41b93e3eacd8fea95e43d30b089c0ed5a2b27bde3b094832e15f
aspnetcore-runtime-dbg-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: dbe776d723dc7a069cc2794382c1002c926f21510729a35809889e14183190c2
aspnetcore-targeting-pack-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: b8bf4067b921b38e04dc3f793636535df67e191e0d766a00859410acf9be5588
dotnet-apphost-pack-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: f4958fc1049a5858425ad1ee8036335660835d26818de71b5bf0a4148fbac3da
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.x86_64.rpm SHA-256: 3dac3e1f751ddaf9b86475b4bf4fc2498802e9b8e978885ddf08d61796a93eef
dotnet-hostfxr-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: 62ee55b01d57c29a132cc7a7cb56f515579bd12cc8b6231213e3791064187921
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.x86_64.rpm SHA-256: f9a53da3f8d1c0919ae55cbc07d10e448c5bc92b149e3abf47f73f6b96f310d1
dotnet-runtime-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: 5b35d4c48b89ea2c28e61b720cff71c3023d84b0f0c88aedd548454092adc492
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.x86_64.rpm SHA-256: 010d4c31f934a67b15dc1a161cbed83a90809537544096e03cb654e7b2b90b84
dotnet-runtime-dbg-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: 92708a80da6a813a17435d7e5a167cd0bcf027c55f38436cc90696f4ff2d0c76
dotnet-sdk-8.0-8.0.125-1.el10_1.x86_64.rpm SHA-256: d2e4b78a16b8bdf8880d23b09f661555df9a57904c44c8ac410a4f7edf78a301
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.x86_64.rpm SHA-256: acd5a949eba6cb696b24949e9d5f8aba415e474182a46f9c3cbc66a03342676f
dotnet-sdk-dbg-8.0-8.0.125-1.el10_1.x86_64.rpm SHA-256: 29e28b35cab84e5e81564bedbcb6e59dbeca9994c42cfedd34dfa2d5dbaba92b
dotnet-targeting-pack-8.0-8.0.25-1.el10_1.x86_64.rpm SHA-256: 5ddfeef8bf8c4ff7e6b5a94e0c090f29aea2f3279338d3a143bb1b302223d86d
dotnet-templates-8.0-8.0.125-1.el10_1.x86_64.rpm SHA-256: 8ed0b040d3090ab9f17f7e23802c7ea83d9c32542b7d2b566aae1a787192b863
dotnet8.0-debugsource-8.0.125-1.el10_1.x86_64.rpm SHA-256: d140f25a51b75e2513c38213ca5220c64ae2a17a00224b43ccac8be6dbd4fc01

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
dotnet8.0-8.0.125-1.el10_1.src.rpm SHA-256: 4f8fd7b7533a5645e29407251f71dc5648b804b35c952063a8e5a0f443ccc2a3
s390x
aspnetcore-runtime-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: 1932a9c07fc960ae8f60cd7809920f4cf09870b1d89d7e5240235cac25ca0339
aspnetcore-runtime-dbg-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: 836b75fc8c90e9993c823dbad93f1f6f1898abcba25e2956a87e6dc7fcaf7e50
aspnetcore-targeting-pack-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: 53ca094088df8a2269a536b4e082bf501aa1adae77b7623bf85ad65498cb9003
dotnet-apphost-pack-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: c6e3063e335714c5e8d5fabb0ea6eb7c5f6f7ec9a41e705bffa482ce08434382
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.s390x.rpm SHA-256: 22c8c996c8759599f4e74639d9a420b014167b2716b2a82c34288b28f1586936
dotnet-hostfxr-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: 5ba3676e8f3b2f71bcb9169c20dabb2f7ab07508c65ef489041b9a218d45672c
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.s390x.rpm SHA-256: c78cdf7d80e4e637457880125c31c5ad956aa67b570563af303651e56c7d53b2
dotnet-runtime-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: ec2577dc20854c03152cb11a0d0143ffae3f3903acb044feb0106703e199b404
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.s390x.rpm SHA-256: 2cea714b33d51c17dcc7beb37b1ad8257f3ce567b991aa2364f00bbe6ed67619
dotnet-runtime-dbg-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: dfce3cf9c7242102c3e2110856e3e2acb023e38e0709e93baa15351f57aa4fee
dotnet-sdk-8.0-8.0.125-1.el10_1.s390x.rpm SHA-256: 161efa9736b496e53c50d9cce0c85683b0d2ed0fe149d4c840b6b8cb9f4de3f3
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.s390x.rpm SHA-256: b5ab43ada8c7bd8a82f57719ee61d198e788159789d9d8cc098b8b55f9751a8a
dotnet-sdk-dbg-8.0-8.0.125-1.el10_1.s390x.rpm SHA-256: ca7694fa49c28fc1d120900c741745531f408f4566e4db66b0abede0f7db2150
dotnet-targeting-pack-8.0-8.0.25-1.el10_1.s390x.rpm SHA-256: e6f31e294e874b92877c4e14f6b8b1d2959e8e731e6b114ff09039d8827ca9a3
dotnet-templates-8.0-8.0.125-1.el10_1.s390x.rpm SHA-256: 0dd15adcfc5e0e1cf205b786482d99884d7348c709e4f10f7fb3bf1bb638b08f
dotnet8.0-debugsource-8.0.125-1.el10_1.s390x.rpm SHA-256: fd367c8038b2859138b17cacba1f9846f6e1a0e460498d33bf247348df84cb37

Red Hat Enterprise Linux for Power, little endian 10

SRPM
dotnet8.0-8.0.125-1.el10_1.src.rpm SHA-256: 4f8fd7b7533a5645e29407251f71dc5648b804b35c952063a8e5a0f443ccc2a3
ppc64le
aspnetcore-runtime-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: b1613038a70f9def11081e936a57742cfaa80008663adaacbfb5d3325b9714b6
aspnetcore-runtime-dbg-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: a42fea35cfaaf43b3740544f1855f9a0bda807c56b0fd09c7ad1ea8d26cc12ec
aspnetcore-targeting-pack-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 2fe4174039900aa195c9f5d1977289dad769ec6a7c3ecf4391737476cfcc3913
dotnet-apphost-pack-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 8463ec1ce2dfff8f425895aa6a2a78be00db8e33f32feac1b133edd3b878bee4
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.ppc64le.rpm SHA-256: f7612af9b7bf9e7ae7f7173079335e7f0702f92eee4ea25ddd38068bf012207d
dotnet-hostfxr-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 3eff5058bb8fc630628a3b3641c8fe708ae83071b3a0c4c978b386706e863fee
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 8a31eff95b6db356af172c1c13c3fe7085c2aff840b41a24955e85946ad2fdeb
dotnet-runtime-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 00af642739cfb156b450e1207289d8da342f12269b28731b7c78281b27b4b675
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.ppc64le.rpm SHA-256: d4ae723b818603f08b95447022478135af19dc87344192c8377ba2dc64d5608d
dotnet-runtime-dbg-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 95025d79ef158bd2a7c69329e1ec1afaa56d280bcb706f23598e868ff1265b43
dotnet-sdk-8.0-8.0.125-1.el10_1.ppc64le.rpm SHA-256: c5395a4a9d9492cc1b4be6a9de5fdf07a3521c6ae402105ef259b7f97b344cce
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.ppc64le.rpm SHA-256: cf0fec2d193bd651feeb0b85e548fef1bd778aa6528e261497399c92f8f2bfac
dotnet-sdk-dbg-8.0-8.0.125-1.el10_1.ppc64le.rpm SHA-256: 5f723368524db6e8f7567dcdc852ddbf5e4ba460cea8350d220e1e2656e8062f
dotnet-targeting-pack-8.0-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 1ed1b11247b1fc47de7c10dfcc944fe2a3753766381ed74bf2476b9343921ba1
dotnet-templates-8.0-8.0.125-1.el10_1.ppc64le.rpm SHA-256: 6d81c213567aaa6d5db62c98296a7f12c6f23ce534eab15b053d6d52f5e77c87
dotnet8.0-debugsource-8.0.125-1.el10_1.ppc64le.rpm SHA-256: 6ed3ab2f81de12682565b1a76760b7031742b2f9f4fd50fd1d842072e3788593

Red Hat Enterprise Linux for ARM 64 10

SRPM
dotnet8.0-8.0.125-1.el10_1.src.rpm SHA-256: 4f8fd7b7533a5645e29407251f71dc5648b804b35c952063a8e5a0f443ccc2a3
aarch64
aspnetcore-runtime-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: 1b08d5368367771609fb36f06766793a4f55f102a0f74c8f67c14c69984db873
aspnetcore-runtime-dbg-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: 40116709fb47970c8f99efc4e7ff3034b43cac36f85ca955c7f74c47c61b98fb
aspnetcore-targeting-pack-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: 85d423498f0ecee927b1128999754ac2a266b336228bf225e131f619eda125e3
dotnet-apphost-pack-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: 0c1850bc76ea96df28a2d43ec90439480d4d1455970814cb29e17277e2525e96
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.aarch64.rpm SHA-256: a17bc3ee9aae89e755bc25ab1c1766182ebc164d108b7daaa3bef4d95a3d93ca
dotnet-hostfxr-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: 06a3eb85856625baee9fa3fc25b9b6583c613ccdf637862ed317134827e85ad4
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.aarch64.rpm SHA-256: 23e2fec83521a90ba528319ce15d3f84e4c37feba2fbef267cc9b9aed9c6e478
dotnet-runtime-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: 8f558f17356254bbd776791a34109d882d49f359f6d6eada4c2f9b1ac588b435
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.aarch64.rpm SHA-256: 4f2da5bd8615990467ce9dc75d970913a2a721e1d45f176e19e080020b8211f1
dotnet-runtime-dbg-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: fae147b1a906f32c449e373bc7a10801599053292385f2cbcde54670a2cf8c85
dotnet-sdk-8.0-8.0.125-1.el10_1.aarch64.rpm SHA-256: 07872ae26f1ee86be73bb02708c2f219194dda6f464059031e9386a015056c8c
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.aarch64.rpm SHA-256: d9fde5a49e82c7be75ee4cde6e735c33c0523ac9439cf4028932825c32458841
dotnet-sdk-dbg-8.0-8.0.125-1.el10_1.aarch64.rpm SHA-256: 702ba6450574c52d9c72b9df4d23444b62263092644800247c5aa196738a9f48
dotnet-targeting-pack-8.0-8.0.25-1.el10_1.aarch64.rpm SHA-256: 6dba7b00708dbfecd2710968c7422e5de617252f77f71a00cf98774a3c962fb4
dotnet-templates-8.0-8.0.125-1.el10_1.aarch64.rpm SHA-256: 11437faf0693b23cfba7c7a40fa46bd1ae3d4e28a08d716b177c5608fea056ff
dotnet8.0-debugsource-8.0.125-1.el10_1.aarch64.rpm SHA-256: ba1e19a760e6e654b22f397a63b0a5c92b63536359d831213979f8e85a6d3fc1

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.x86_64.rpm SHA-256: 3dac3e1f751ddaf9b86475b4bf4fc2498802e9b8e978885ddf08d61796a93eef
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.x86_64.rpm SHA-256: f9a53da3f8d1c0919ae55cbc07d10e448c5bc92b149e3abf47f73f6b96f310d1
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.x86_64.rpm SHA-256: 010d4c31f934a67b15dc1a161cbed83a90809537544096e03cb654e7b2b90b84
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.x86_64.rpm SHA-256: acd5a949eba6cb696b24949e9d5f8aba415e474182a46f9c3cbc66a03342676f
dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el10_1.x86_64.rpm SHA-256: 532cc3d20b81e9a08eee660b33d891019d2942e906bc21082d41236b7b3a4b4e
dotnet8.0-debugsource-8.0.125-1.el10_1.x86_64.rpm SHA-256: d140f25a51b75e2513c38213ca5220c64ae2a17a00224b43ccac8be6dbd4fc01

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.ppc64le.rpm SHA-256: f7612af9b7bf9e7ae7f7173079335e7f0702f92eee4ea25ddd38068bf012207d
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.ppc64le.rpm SHA-256: 8a31eff95b6db356af172c1c13c3fe7085c2aff840b41a24955e85946ad2fdeb
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.ppc64le.rpm SHA-256: d4ae723b818603f08b95447022478135af19dc87344192c8377ba2dc64d5608d
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.ppc64le.rpm SHA-256: cf0fec2d193bd651feeb0b85e548fef1bd778aa6528e261497399c92f8f2bfac
dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el10_1.ppc64le.rpm SHA-256: 93b93e913b1b19d41184036689b23eadbb50cf95ea868bddafb6c33fd7ff9815
dotnet8.0-debugsource-8.0.125-1.el10_1.ppc64le.rpm SHA-256: 6ed3ab2f81de12682565b1a76760b7031742b2f9f4fd50fd1d842072e3788593

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.aarch64.rpm SHA-256: a17bc3ee9aae89e755bc25ab1c1766182ebc164d108b7daaa3bef4d95a3d93ca
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.aarch64.rpm SHA-256: 23e2fec83521a90ba528319ce15d3f84e4c37feba2fbef267cc9b9aed9c6e478
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.aarch64.rpm SHA-256: 4f2da5bd8615990467ce9dc75d970913a2a721e1d45f176e19e080020b8211f1
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.aarch64.rpm SHA-256: d9fde5a49e82c7be75ee4cde6e735c33c0523ac9439cf4028932825c32458841
dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el10_1.aarch64.rpm SHA-256: d518071a49905be842833d1469bac6bf1476e9c4c5a2ae17a709b99516bec6e7
dotnet8.0-debugsource-8.0.125-1.el10_1.aarch64.rpm SHA-256: ba1e19a760e6e654b22f397a63b0a5c92b63536359d831213979f8e85a6d3fc1

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
dotnet-apphost-pack-8.0-debuginfo-8.0.25-1.el10_1.s390x.rpm SHA-256: 22c8c996c8759599f4e74639d9a420b014167b2716b2a82c34288b28f1586936
dotnet-hostfxr-8.0-debuginfo-8.0.25-1.el10_1.s390x.rpm SHA-256: c78cdf7d80e4e637457880125c31c5ad956aa67b570563af303651e56c7d53b2
dotnet-runtime-8.0-debuginfo-8.0.25-1.el10_1.s390x.rpm SHA-256: 2cea714b33d51c17dcc7beb37b1ad8257f3ce567b991aa2364f00bbe6ed67619
dotnet-sdk-8.0-debuginfo-8.0.125-1.el10_1.s390x.rpm SHA-256: b5ab43ada8c7bd8a82f57719ee61d198e788159789d9d8cc098b8b55f9751a8a
dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el10_1.s390x.rpm SHA-256: 63f2962b58dd66960c1794ae791b86f95d3246b4eb6b6a0f15d050ca5b27bf2f
dotnet8.0-debugsource-8.0.125-1.el10_1.s390x.rpm SHA-256: fd367c8038b2859138b17cacba1f9846f6e1a0e460498d33bf247348df84cb37

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.