Oracle Errata System Oracle Linux 5.11 2026-09-11T10:35:02 Oracle Linux 10 [2.39-128.0.1] - Forward port Oracle changes to 2.39-128. - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com> Oracle history: Jul-15-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-126.0.1 - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Jul-15-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-124.0.1 - Forward port Oracle changes to 2.39-124. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> May-19-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-121.0.1 - Forward port Oracle changes to 2.39-121. - Reviewed-by: David Faust <david.faust@oracle.com> April-2-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-113.0.1 - Reverted to version 2.39-113. - Reviewed-by: David Faust <david.faust@oracle.com> February-3-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-99.0.1 - Forward port Oracle changes to 2.39-99. - Reviewed-by: David Faust <david.faust@oracle.com> January-27-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-58.0.1.7 - Forward port Oracle changes to 2.39-58.7. - Reviewed-by: David Faust <david.faust@oracle.com> November-26-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-58.0.1.2 - Forward port Oracle changes to 2.39-58.2. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> September-29-2025 David Faust <david.faust@oracle.com> - 2.39-58.0.1 - Forward port Oracle changes to 2.39-58. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> August-29-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-54.0.1 - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> August-7-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-46.0.1 - Forward port Oracle changes. Reviewed-by: David Faust <david.faust@oracle.com> July-15-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-43.0.1 - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> March-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-37.0.1 - Forward port Oracle changes to 2.39-37. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Jan-22-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-32.0.1 - Integration of relevant Oracle patches. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.39-128] - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing (RHEL-180652, RHEL-185612) [2.39-127] - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654) [2.39-126] - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) [2.39-125] - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) [2.39-124] - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) [2.39-123] - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) [2.39-122] - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) [2.39-121] - Avoid duplicate DNS queries when search path contains '.' (RHEL-142675) [2.39-120] - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module MODERATE Copyright 2026 Oracle, Inc. CVE-2026-5435 CVE-2026-5928 CVE-2026-6238 cpe:/a:oracle:linux:10::userspace_ksplice