ELSA-2026-86594

ELSA-2026-86594 - .NET 8.0 security, bug fix, and enhancement update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-10-21

Description

[8.0.132-2.0.1]
- Add support for Oracle Linux

[8.0.132-2]
- Fix apphost hash duplication under compiler optimizations on ppc64le
- Resolves: RHEL-277790

[8.0.132-1]
- Update to .NET SDK 8.0.132 and Runtime 8.0.32
- Resolves: RHEL-277790

Related CVEs

CVE-2026-58280

CVE-2026-66822

CVE-2026-69651

CVE-2026-70159

CVE-2026-70175

CVE-2026-70179

CVE-2026-70181

CVE-2026-70183

CVE-2026-70186

CVE-2026-70188

CVE-2026-70196

CVE-2026-88092

CVE-2026-92707

CVE-2026-96222

CVE-2026-96225

CVE-2026-96230

CVE-2026-96231

CVE-2026-96233

CVE-2026-96236

CVE-2026-96237

CVE-2026-96238

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	dotnet8.0-8.0.132-2.0.1.el8_10.src.rpm	e0095c05f34b898c3cf5a96fa0d33018204bff4d740efca1b89aa09299a3dfd3	-	ol8_aarch64_appstream
	dotnet8.0-8.0.132-2.0.1.el8_10.src.rpm	e0095c05f34b898c3cf5a96fa0d33018204bff4d740efca1b89aa09299a3dfd3	-	ol8_aarch64_codeready_builder
	aspnetcore-runtime-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	56354bd071ff66b15f8fb0066e91f792f3d91262f7edfea9d1a3cc4a3bb83d19	-	ol8_aarch64_appstream
	aspnetcore-runtime-dbg-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	0b06d276e07a645a10c9d72fdd79db2946a652b7bbb356f76754ef2992182b2c	-	ol8_aarch64_appstream
	aspnetcore-targeting-pack-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	93b23ed408f05a7da1ec2750b412f789e160b736cbf2577ee728cec74676143f	-	ol8_aarch64_appstream
	dotnet-apphost-pack-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	be3c319b2095adec08613a3442868c3609da41e4c2373a459298a8f9fe2309a4	-	ol8_aarch64_appstream
	dotnet-hostfxr-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	9c64317f0265f237bb7560ff8a188db78ef9feaecd04be936eb292c3a40acbb6	-	ol8_aarch64_appstream
	dotnet-runtime-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	e894d98b99209a89b234bbd39262a4bac643b41ad4355a5d6780ea27457af580	-	ol8_aarch64_appstream
	dotnet-runtime-dbg-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	5c9a2d50ad2fd1b72e1f619507c15611dfab010072126f29de0133bfeb97589e	-	ol8_aarch64_appstream
	dotnet-sdk-8.0-8.0.132-2.0.1.el8_10.aarch64.rpm	38ecc936cf51e960e3ca90e660c243ef79e7cd7c81272be4856991dc6615062b	-	ol8_aarch64_appstream
	dotnet-sdk-8.0-source-built-artifacts-8.0.132-2.0.1.el8_10.aarch64.rpm	4ff4bdcb296c9042de8252b0a52c8a2e1cfc95f384c139518fc79784cff3b54f	-	ol8_aarch64_codeready_builder
	dotnet-sdk-dbg-8.0-8.0.132-2.0.1.el8_10.aarch64.rpm	415d8358af3e08f22a9c0cfc88e60a6b69a17db5bb0ffb9332461f7acbe37b22	-	ol8_aarch64_appstream
	dotnet-targeting-pack-8.0-8.0.32-2.0.1.el8_10.aarch64.rpm	336732274c2122b97d65e7e2e4e8be0b62fa41a91dc92d5959db6ed8e53d2f55	-	ol8_aarch64_appstream
	dotnet-templates-8.0-8.0.132-2.0.1.el8_10.aarch64.rpm	f9776c46f8f8719d64baf17f38ef498ee3835779a8ec99be14a58b13a2ac8213	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	dotnet8.0-8.0.132-2.0.1.el8_10.src.rpm	e0095c05f34b898c3cf5a96fa0d33018204bff4d740efca1b89aa09299a3dfd3	-	ol8_x86_64_appstream
	dotnet8.0-8.0.132-2.0.1.el8_10.src.rpm	e0095c05f34b898c3cf5a96fa0d33018204bff4d740efca1b89aa09299a3dfd3	-	ol8_x86_64_codeready_builder
	aspnetcore-runtime-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	28f65d03921bb01f620544bf5deeaee9adae2a6155a6b4aff4b5c3fe5c6f3355	-	ol8_x86_64_appstream
	aspnetcore-runtime-dbg-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	f919cfb5ac5d78f4528f97ae9ea7764bfb4ccafd18b49921472109206032fd10	-	ol8_x86_64_appstream
	aspnetcore-targeting-pack-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	6b62bf67e8ea862329a09adf219c6435931306fc0a5b2b35a3543bb33020de43	-	ol8_x86_64_appstream
	dotnet-apphost-pack-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	85c515b7b86ba909e40400a05a42e1541ad4b7055bbe0f1010f6935f269d52b5	-	ol8_x86_64_appstream
	dotnet-hostfxr-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	8dd0ad4f20b7e86dc7598cf3cc9f7288262d886db492440845ed63d35346f30b	-	ol8_x86_64_appstream
	dotnet-runtime-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	62b1d3435b48650ed064e58271a8f85e37cb9c804c6644ae7fe1f3c51e437e7e	-	ol8_x86_64_appstream
	dotnet-runtime-dbg-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	d4e12fbf08932234863b86c42452847bb6655939fc3850eba85230a7962273f6	-	ol8_x86_64_appstream
	dotnet-sdk-8.0-8.0.132-2.0.1.el8_10.x86_64.rpm	a0deac3affd47dcbf737eb374598617af8a75281d333248d53338f9c8ff0016e	-	ol8_x86_64_appstream
	dotnet-sdk-8.0-source-built-artifacts-8.0.132-2.0.1.el8_10.x86_64.rpm	d1129d27c8851a84deec671df636c7d30d9fbb9fafdc51e1669108d609eda544	-	ol8_x86_64_codeready_builder
	dotnet-sdk-dbg-8.0-8.0.132-2.0.1.el8_10.x86_64.rpm	41c62f51b2deeaa30ac2a4517294a9588cecf887645e06f7ef18193786d502bc	-	ol8_x86_64_appstream
	dotnet-targeting-pack-8.0-8.0.32-2.0.1.el8_10.x86_64.rpm	6891b10bae806a5f367a5662559c88b738209103b21734e0f3379e49a262f269	-	ol8_x86_64_appstream
	dotnet-templates-8.0-8.0.132-2.0.1.el8_10.x86_64.rpm	531e350e9e72a1dec7b4e8ac4c73d375adbb1875362ec6f96f89a0fa060e013b	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team