Oracle Errata System Oracle Linux 5.11 2026-05-13T10:46:54 Oracle Linux 9 [2:2.11.7-1.7] - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159815, RHEL-155477, RHEL-161046, RHEL-161481 Resolves: RHEL-161517, RHEL-161084, RHEL-167803 MODERATE Copyright 2026 Oracle, Inc. CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder