Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 1

Vulnerabilities 3

• High 7.5
  CVE-2026-42899

  ASP.NET Core Denial of Service Vulnerability

  Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft .NET 8.0 .NET 9.0 .NET 10.0 Ubuntu Alpine Wolfi NuGet
  May 12, 2026
• High 7.5
  CVE-2026-45591

  ASP.NET Core Denial of Service Vulnerability

  Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft .NET 9.0 runtime .NET 8.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet
  Jun 9, 2026
• Medium 6.2
  CVE-2026-45491

  .NET Tampering Vulnerability

  Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

  Microsoft .NET 9.0 runtime .NET 8.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet
  Jun 9, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-42899
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-45591
• report
  https://access.redhat.com/security/cve/CVE-2026-45491
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17527.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2476605
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-42899
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-42899
• article
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42899
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2487164
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-45491
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-45491
• article
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2487224
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-45591
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-45591
• article
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591