Oracle Errata System Oracle Linux 5.11 2026-05-20T08:59:18 Oracle Linux 9 [2:1.20.1-24.0.1.el9_7.3] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] - Update upstream references [Orabug: 36579090] [2:1.20.1-24.3] - Resolves: RHEL-176230 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) [2:1.20.1-24.2] - Resolves: RHEL-159557 - CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159536 - CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159444 - CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-157885 - CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files [2:1.20.1-24.1] - Resolves: RHEL-146525 - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) CRITICAL Copyright 2026 Oracle, Inc. CVE-2026-42945 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder