This Red Hat security advisory (RHSA-2026:37577) addresses vulnerabilities in the dotnet8.0 RPM packages included in Red Hat Hardened Images. The update includes multiple updated RPMs such as aspnetcore-runtime, dotnet-runtime, dotnet-sdk, and related components for aarch64 and x86_64 architectures. The advisory specifically mentions fixes for CVE-2026-59725 and CVE-2026-59869. The advisory does not specify exact affected or fixed versions, nor does it provide a CVSS score. No known exploits have been reported. The advisory directs users to apply the update available via Red Hat's image repository.

The vulnerabilities addressed by this advisory affect the dotnet8.0 runtime and SDK components within Red Hat Hardened Images. While the exact impact details are not provided, the vendor classifies the severity as high, indicating potential significant security risks if unpatched. No known exploits in the wild have been reported, suggesting limited or no active exploitation at this time.

Red Hat has released updated RPM packages for dotnet8.0 components as part of this security advisory. Users should apply these updates by obtaining the latest Hardened Images RPMs from Red Hat's official image repository at https://images.redhat.com/. The vendor advisory does not indicate any temporary mitigations or that no action is required. Patch status is not explicitly confirmed in terms of affected or fixed versions; therefore, users should follow Red Hat's official update instructions to ensure remediation.