Oracle Errata System Oracle Linux 5.11 2026-08-14T10:39:11 Oracle Linux 8 [32:9.16.23-0.22.12] - Fix NSEC3 signer validation (CVE-2026-10723) - Resolves: RHEL-213499 [32:9.16.23-0.22.11] - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Resolves: RHEL-213313 [32:9.16.23-0.22.10] - Fix CVE-2026-11622: reference-counted DNS cache slab headers - Resolves: RHEL-213396 [32:9.16.23-0.22.9] - Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing - Add new unit test - Resolves: RHEL-213406 [32:9.16.23-0.22.8] - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Add upstream rpz system test - Resolves: RHEL-213478 [32:9.16.23-0.22.7] - Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG - Resolves: RHEL-213478 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-10723 CVE-2026-11331 CVE-2026-11622 CVE-2026-11721 CVE-2026-13204 CVE-2026-13321 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder