Oracle Errata System Oracle Linux 5.11 2026-08-14T08:35:44 Oracle Linux 9 [9.16.23-40.0.1.el9_8.8] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.16.23-40.8] - Fix NSEC3 signer validation (CVE-2026-10723) [32:9.16.23-40.7] - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names [32:9.16.23-40.6] - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) [32:9.16.23-40.5] - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) [32:9.16.23-40.4] - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) [32:9.16.23-40.3] - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) [32:9.16.23-40.2] - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) [32:9.16.23-40.1] - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-10723 CVE-2026-11331 CVE-2026-11622 CVE-2026-11721 CVE-2026-13204 CVE-2026-13321 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder