Oracle Errata System Oracle Linux 5.11 2026-08-17T16:11:17 Oracle Linux 10 [1.26.7-2.7] - Fix ADPCM decoder input validation (CVE-2026-19387) Resolves: RHEL-235500 [1.26.7-2.5] - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats (CVE-2026-59691) Resolves: RHEL-193550 [1.26.7-2.4] - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184391 [1.26.7-2.3] - Fix for CVE-2026-52719 Resolves: RHEL-184406 [1.26.7-2.2] - Fix integer overflows in VMnc decoder (CVE-2026-52722) Resolves: RHEL-184425 [1.26.7-2.1] - Fix for CVE-2026-52720: validate framebuffer update rectangles in VNC source plugin's RFB decoder Resolves: RHEL-184462 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-19387 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder