Oracle Errata System Oracle Linux 5.11 2026-07-09T17:55:29 Oracle Linux 9 [1.22.12-7.1] - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 [1.22.12-4.4] - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 [1.22.12-4.3] - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 [1.22.12-4.2] - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 [1.22.12-4.1] - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 [1.22.12-4] - fix for CVE-2025-3887 Resolves: RHEL-93059 [1.22.12-3] - Rebuild - Resolves: RHEL-38511, RHEL-41157 [1.22.12-2] - Rebuild - Resolves: RHEL-38511, RHEL-41157 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-52718 CVE-2026-52719 CVE-2026-52720 CVE-2026-52722 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder