Red Hat Product Errata RHSA-2026:24332 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24332 - Security Advisory Overview Updated Packages Synopsis Important: .NET 8.0 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for .NET 8.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es): serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043) dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2453284 - CVE-2026-34043 serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization BZ - 2476605 - CVE-2026-42899 dotnet: .NET: infinite loop allows an attacker to cause a denial of service CVEs CVE-2026-34043 CVE-2026-42899 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM dotnet8.0-8.0.127-1.el10_0.src.rpm SHA-256: 6a69673f0ebfd66b5cd41e0d2f40b88969bfb87fca0b940771cd0e272c4d87e6 x86_64 aspnetcore-runtime-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: 36f55253947e20673ca9150a4ac1e0e68c5bebda6244222e0d7ccd5c45f27f58 aspnetcore-runtime-dbg-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: bdc8768bbaf4f50a0ea92e2a71b59c03181575a41749923d5d6938bdcb5cd92c aspnetcore-targeting-pack-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: 4f1932e119cc588ee7c02b49a7995846805f10f674130e0783aebf395f767451 dotnet-apphost-pack-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: 20444a13bc783d7eb68e288d5a1ee842aab6dc6aed44097e82cc5cdc262ae697 dotnet-apphost-pack-8.0-debuginfo-8.0.27-1.el10_0.x86_64.rpm SHA-256: 5bc9440dae8b885c2f3192f8a86c7cf0186cef9da98bac95f73a1f452fb4e159 dotnet-hostfxr-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: 83c3957de9a020fa9619010a82d83e6fe5619a133c257789c305f9e0b880f21f dotnet-hostfxr-8.0-debuginfo-8.0.27-1.el10_0.x86_64.rpm SHA-256: e42e761f9c1c68ade10c36a11dbdee490b1206822e9e19dce477203b29ff7571 dotnet-runtime-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: 88abf91f63fd13cc3ff6684420bc33b504db0e08c21c6cc34d46eb8a143af1be dotnet-runtime-8.0-debuginfo-8.0.27-1.el10_0.x86_64.rpm SHA-256: 641452d4be4eff50fc0c67f0cb9dfc231b7528d9ace142824b2b3784fc3d3951 dotnet-runtime-dbg-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: 84b9d79e5680243c074e7075b4aefaf2920153184bc7514271d7abee2ceeec3e dotnet-sdk-8.0-8.0.127-1.el10_0.x86_64.rpm SHA-256: 43d2db824039a70d47ba7d93bca41411a592d3198fb74e2e1bdbef0307680b45 dotnet-sdk-8.0-debuginfo-8.0.127-1.el10_0.x86_64.rpm SHA-256: 542b835b40265f5d7f455f8c8e8ebc7ea6770f6c5e09eb536be3a58b26a8518d dotnet-sdk-dbg-8.0-8.0.127-1.el10_0.x86_64.rpm SHA-256: 40a7537991f4f6898c71b0cb2ff08b4ae05b086efc36bf8a855aa54e7a507c78 dotnet-targeting-pack-8.0-8.0.27-1.el10_0.x86_64.rpm SHA-256: a970a7bfe0ffec723dfcff86c9c93d35409777c88937ecd79b2f9bfcd0da9fa3 dotnet-templates-8.0-8.0.127-1.el10_0.x86_64.rpm SHA-256: f1864bd99666c151bbd5e92e4751fe84f8b7cfcabc1dce57829f717f75969572 dotnet8.0-debugsource-8.0.127-1.el10_0.x86_64.rpm SHA-256: ef34bc2951f4003633b7064f825788c9db757ba3e9721f226254a985cd0328b4 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM dotnet8.0-8.0.127-1.el10_0.src.rpm SHA-256: 6a69673f0ebfd66b5cd41e0d2f40b88969bfb87fca0b940771cd0e272c4d87e6 s390x aspnetcore-runtime-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: 40ac06ebcd0ec1ae8cd1a02135d67ed2dd568b72150a0c2d9221209d17596a0a aspnetcore-runtime-dbg-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: 87af15e3938c198650ba89130cc7fcd4eaf732fd62fd303bb5aeef0ebe47609f aspnetcore-targeting-pack-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: 5bf4d621ef1878beb3520dc95d68756a1e588b1cb53d90018496c8bedd862889 dotnet-apphost-pack-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: 44a508e127cd1b4d1f738211b7397ada22a0079cc870c6d6dca3b4aba3639f1d dotnet-apphost-pack-8.0-debuginfo-8.0.27-1.el10_0.s390x.rpm SHA-256: 8348070e1ebc83a3b2d232be35e0b87d2c3f4eb03429f8626205ce7df45b3ec0 dotnet-hostfxr-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: 464f266ec907ba64ac03c1bf50e0c8dbb2a18899f46cb11736010b509f7723ae dotnet-hostfxr-8.0-debuginfo-8.0.27-1.el10_0.s390x.rpm SHA-256: 2431d123e61f76b9b4c2a8bfbb15aba18a8783aaafb3c3b1467dbd6fe201e876 dotnet-runtime-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: 446b6ac0e4c58c96ec9040c6623bc753c95e0bfba31f41bda298c70214958684 dotnet-runtime-8.0-debuginfo-8.0.27-1.el10_0.s390x.rpm SHA-256: 2e8f90fa77a2a32618b0a395f1d9e0b5feb610497f7c70e95ed78f23a55eae44 dotnet-runtime-dbg-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: bffb2ce0806e201d681a45bb611b52ab7884fcd81ddcef54d2e5d57e49393d72 dotnet-sdk-8.0-8.0.127-1.el10_0.s390x.rpm SHA-256: 57868bfb219f7732eb977cb3921941dfa57248bb973a0c2f89c34fd6e0534f16 dotnet-sdk-8.0-debuginfo-8.0.127-1.el10_0.s390x.rpm SHA-256: e3460fd0e5c4f37648883682e27134a35800d17be7133a84512e161cf0a245ee dotnet-sdk-dbg-8.0-8.0.127-1.el10_0.s390x.rpm SHA-256: d16d2bfdd26da43c3586db492a6c9cc67287292288f902253207f09359e15584 dotnet-targeting-pack-8.0-8.0.27-1.el10_0.s390x.rpm SHA-256: cf08bbf1ea01910c909e3594b56542804d8dde6a7562caa87c7219157789bfca dotnet-templates-8.0-8.0.127-1.el10_0.s390x.rpm SHA-256: 460fea3f714f643dd00c9be9a7a5264e7077871afa719cd7e0d79000fd998b96 dotnet8.0-debugsource-8.0.127-1.el10_0.s390x.rpm SHA-256: c7b962e8abfe7ee88b808e88df8a85a430ca8765a7367349ddd4da493de729ad Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM dotnet8.0-8.0.127-1.el10_0.src.rpm SHA-256: 6a69673f0ebfd66b5cd41e0d2f40b88969bfb87fca0b940771cd0e272c4d87e6 ppc64le aspnetcore-runtime-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: d59304acc4503c8cebabcd5fb7d14e33037156485026d5be0ff373c0d204ce21 aspnetcore-runtime-dbg-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: f01f0e18608ddb230837905d9ed3e532a73aad2a7b8e20188d534d413666d06f aspnetcore-targeting-pack-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: 9960306f3b5836af3308e8d0775eaedf4fced3f6b304c119bdf067e3975742a4 dotnet-apphost-pack-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: e5be89e8b14cb9f10df0ed91c0c40b92ac8a089784602118723a1d217b91cb21 dotnet-apphost-pack-8.0-debuginfo-8.0.27-1.el10_0.ppc64le.rpm SHA-256: 389a2c5d3c06644e5180f1c19ada991dee3a707fd6fbe3944d3fe3252d5b3184 dotnet-hostfxr-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: 499f9330601cf22f424a057f14c45bf473cd5c83b3c2fcdabfab7e21592a0c23 dotnet-hostfxr-8.0-debuginfo-8.0.27-1.el10_0.ppc64le.rpm SHA-256: 44fc48c7885a9094f882cf83c33f01ce387f1b9317cd18329f410f040a28f20b dotnet-runtime-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: da57d29ae7c25e22b88f3c20949f48cdd8a78f10ba47e393a15c45ecad79d16b dotnet-runtime-8.0-debuginfo-8.0.27-1.el10_0.ppc64le.rpm SHA-256: 14f9b79e91fab04d0702578983c7906b027149ed750fff83e942c003aaf41ac9 dotnet-runtime-dbg-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: 06cf2c07bf17603857ab2514ff5aee3e7ec48bb449caeb5eb37cacbcd17a9379 dotnet-sdk-8.0-8.0.127-1.el10_0.ppc64le.rpm SHA-256: 86130a395747e079acdf463b4a208d93193b42a918c49a51d6f1aa3e176f92ef dotnet-sdk-8.0-debuginfo-8.0.127-1.el10_0.ppc64le.rpm SHA-256: f74815a4cc6bfb18de1cacc027fdd4fdd1baabfe22b8fbbf7238829ba493c0a7 dotnet-sdk-dbg-8.0-8.0.127-1.el10_0.ppc64le.rpm SHA-256: 0f0925ca56e69fcaca42750a7898c2536c5d6307a912c481228a4c6886c71931 dotnet-targeting-pack-8.0-8.0.27-1.el10_0.ppc64le.rpm SHA-256: 7a5e2b7e40b765d3f0d7c2aea5354b13705dd74018f1e75696c62ba29086b242 dotnet-templates-8.0-8.0.127-1.el10_0.ppc64le.rpm SHA-256: 7960a3a8bf2f7944e681670f2561d9104dda92435b1ac0bf1e41d029b5bc2cf8 dotnet8.0-debugsource-8.0.127-1.el10_0.ppc64le.rpm SHA-256: ec0f937e5089b90a72ab66bc49470fc2cd1da7c9c7de0eab98d2ba97bdb21ea0 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM dotnet8.0-8.0.127-1.el10_0.src.rpm SHA-256: 6a69673f0ebfd66b5cd41e0d2f40b88969bfb87fca0b940771cd0e272c4d87e6 aarch64 aspnetcore-runtime-8.0-8.0.27-1.el10_0.aarch64.rpm SHA-256: f55f0f79e4962a1319f63b5bb3961962294bedc84d1a3e91c2c633e23a87cc3