ELSA-2026-86170

ELSA-2026-86170 - .NET 9.0 security, bug fix, and enhancement update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-10-21

Description

[9.0.122-1.0.1]
- Add support for Oracle Linux

[9.0.122-1]
- Update to .NET SDK 9.0.122 and Runtime 9.0.21
- Resolves: RHEL-277797

Related CVEs

CVE-2026-58280

CVE-2026-66822

CVE-2026-69651

CVE-2026-70159

CVE-2026-70175

CVE-2026-70179

CVE-2026-70181

CVE-2026-70183

CVE-2026-70186

CVE-2026-70188

CVE-2026-70196

CVE-2026-88092

CVE-2026-92707

CVE-2026-96225

CVE-2026-96230

CVE-2026-96231

CVE-2026-96233

CVE-2026-96236

CVE-2026-96237

CVE-2026-96238

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	dotnet9.0-9.0.122-1.0.1.el8_10.src.rpm	432440a3f20f3ef7eb9b329afed9099761a025cf4c35b107f934e9b3c4e61a31	-	ol8_aarch64_appstream
	dotnet9.0-9.0.122-1.0.1.el8_10.src.rpm	432440a3f20f3ef7eb9b329afed9099761a025cf4c35b107f934e9b3c4e61a31	-	ol8_aarch64_codeready_builder
	aspnetcore-runtime-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	8024f0814877ea6f066241f155395a572b79fe36f4e4d7fad63d885f45e5b03e	-	ol8_aarch64_appstream
	aspnetcore-runtime-dbg-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	14156ea986642c35900352bae13d2da95034b4760664ad55c7191b0890cc3b1e	-	ol8_aarch64_appstream
	aspnetcore-targeting-pack-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	05e1078901f1f5691c586984397519f0cb407b06d9cd2bfa49f3c1587e5a9f23	-	ol8_aarch64_appstream
	dotnet-apphost-pack-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	1c4c78c10af2a947c4b198d772cb2e2309428891536f44e9da06d99dc55e13fe	-	ol8_aarch64_appstream
	dotnet-hostfxr-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	b46d39fa25f9f539c306c65b6c7ce5fd17e480fe55fe4ad38d98d2bd259766ce	-	ol8_aarch64_appstream
	dotnet-runtime-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	c67f99188370d3c9b3f434d4c20083064c979c1f4123f019f9973c0925739b43	-	ol8_aarch64_appstream
	dotnet-runtime-dbg-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	15b4cb05152c646bff2c87756c47c8220848de17a66d613b7d14683bbabebc64	-	ol8_aarch64_appstream
	dotnet-sdk-9.0-9.0.122-1.0.1.el8_10.aarch64.rpm	c87be04a82e8a27df466f49a920377d1e548a3b9591ca1140002258ebca30d03	-	ol8_aarch64_appstream
	dotnet-sdk-9.0-source-built-artifacts-9.0.122-1.0.1.el8_10.aarch64.rpm	f5a80d6fd49254b4f177d64f492468eae7fed5b0794cce5497e33ded90f1f342	-	ol8_aarch64_codeready_builder
	dotnet-sdk-aot-9.0-9.0.122-1.0.1.el8_10.aarch64.rpm	833c5f30eeb71b5df39c2f281fbb7f871499517dc68bb4041e17d27ff8c4413e	-	ol8_aarch64_appstream
	dotnet-sdk-dbg-9.0-9.0.122-1.0.1.el8_10.aarch64.rpm	8bf336bdadef94709aa1ff2435f12c72633bc2e37fa0a9aa70352cde7ead2880	-	ol8_aarch64_appstream
	dotnet-targeting-pack-9.0-9.0.21-1.0.1.el8_10.aarch64.rpm	708bef53e67b5c4fe02a3ac64bb0fdb4c2a7ad8b99a5f967f19f865923867150	-	ol8_aarch64_appstream
	dotnet-templates-9.0-9.0.122-1.0.1.el8_10.aarch64.rpm	1c87511080b2cbba23e765f37eede91c6638c4ed00b2a83b907d1d27859e69b8	-	ol8_aarch64_appstream
	netstandard-targeting-pack-2.1-9.0.122-1.0.1.el8_10.aarch64.rpm	7a1a8e105e92dd1b9d58b617155adbd27d5cae78c7c79987fb9fe7e6fbfab9e2	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	dotnet9.0-9.0.122-1.0.1.el8_10.src.rpm	432440a3f20f3ef7eb9b329afed9099761a025cf4c35b107f934e9b3c4e61a31	-	ol8_x86_64_appstream
	dotnet9.0-9.0.122-1.0.1.el8_10.src.rpm	432440a3f20f3ef7eb9b329afed9099761a025cf4c35b107f934e9b3c4e61a31	-	ol8_x86_64_codeready_builder
	aspnetcore-runtime-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	c91b340e97c3d91eb110840332b27073b4022d7f499a379f9ec8eecb1a295ff0	-	ol8_x86_64_appstream
	aspnetcore-runtime-dbg-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	d73a110aa9256940e52bd358b9d4a16a0f2952768ed055b8e4235387faedada4	-	ol8_x86_64_appstream
	aspnetcore-targeting-pack-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	196cdde57bc9fccf547cb80cee94540917ab0ee578c27a1895139282786b3d53	-	ol8_x86_64_appstream
	dotnet-apphost-pack-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	99855c7eb7bf217b0f78ded62fe54356df3c0f4a2a6a38d7eff7136e08ef25ff	-	ol8_x86_64_appstream
	dotnet-hostfxr-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	b3d5afb8bdd7004c4088dfe8d808815a51bf6f0959cc3d55224fcb2f2e98d24e	-	ol8_x86_64_appstream
	dotnet-runtime-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	11317c567261eb16c5e2dfed711c38daad0486a3edbb9f4a0361c59b628a286a	-	ol8_x86_64_appstream
	dotnet-runtime-dbg-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	643c48cc9b309ac30d080142674e9af7aeb2e8ac059adb7eec2abf3350464905	-	ol8_x86_64_appstream
	dotnet-sdk-9.0-9.0.122-1.0.1.el8_10.x86_64.rpm	d358e41063b2b4d0cb53f30fff87397175c2bdb3ee3bd7c5ef5e0db7d7fb4fc4	-	ol8_x86_64_appstream
	dotnet-sdk-9.0-source-built-artifacts-9.0.122-1.0.1.el8_10.x86_64.rpm	51c42c10f88d9697966c576bfa0b60c278513fe594e669ad65b891047c9c637f	-	ol8_x86_64_codeready_builder
	dotnet-sdk-aot-9.0-9.0.122-1.0.1.el8_10.x86_64.rpm	749d0a9854671063e3fd725c2a68f52e54044df747da3bb2fb6afcfd63e25b03	-	ol8_x86_64_appstream
	dotnet-sdk-dbg-9.0-9.0.122-1.0.1.el8_10.x86_64.rpm	4e35035eb505d53567616053939c66ae73ea43589b4fafc6c39ddae36053c5e7	-	ol8_x86_64_appstream
	dotnet-targeting-pack-9.0-9.0.21-1.0.1.el8_10.x86_64.rpm	2ff361cf79c6662dc6af391c7b484b7d45ff7063cfde1c28472e257fe86a669f	-	ol8_x86_64_appstream
	dotnet-templates-9.0-9.0.122-1.0.1.el8_10.x86_64.rpm	7385dbbf78ecc3fff0dbef8366f10110f478d46dd2f585e56957dde3ba008184	-	ol8_x86_64_appstream
	netstandard-targeting-pack-2.1-9.0.122-1.0.1.el8_10.x86_64.rpm	3a6337ec555881b24d7f407e59146b1f9ffd2f49ff91276e38d3318a0e977933	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team