Oracle Errata System Oracle Linux 5.11 2026-07-15T10:57:52 Oracle Linux 10 [6.12.0-211.7.3.el10_2.OL10] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] - Add Oracle Linux IMA certificates - Update module name for cryptographic module [Orabug: 37400433] - Clean git history at setup stage [6.12.0-211.7.3.el10_2] - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} [6.12.0-211.7.2.el10_2] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172542] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172542] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172542] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172542] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172542] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172542] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172542] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172542] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172542] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172542] IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-23060 CVE-2026-31431 CVE-2026-31677 CVE-2026-43284 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder cpe:/o:oracle:linux:10:2:baseos_base cpe:/o:oracle:linux:10::baseos_latest