Oracle Errata System Oracle Linux 5.11 2026-05-19T16:18:20 Oracle Linux 10 [2:1.26.3-2.0.1.el10_1.2] - Reference oracle-indexhtml within Requires [Orabug: 33802044] [2:1.26.3-8] - Fix release number [2:1.26.3-7] - Resolves: RHEL-176217 - nginx: NGINX: Arbitrary Code [2:1.26.3-6] - Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files [2:1.26.3-5] - Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled [2:1.26.3-4] - Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file [2:1.26.3-3] - Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module CRITICAL Copyright 2026 Oracle, Inc. CVE-2026-42945 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder