Oracle Errata System Oracle Linux 5.11 2026-07-17T19:23:47 Oracle Linux 10 [4.0.3-35] - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 [4.0.3-34] - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-33210 CVE-2026-41316 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder