Oracle Errata System Oracle Linux 5.11 2026-08-19T10:33:24 Oracle Linux 9 [2.68.4-19.9] - Fix CVE-2026-15588: limit D-Bus auth line read length [2.68.4-19.8] - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 [2.68.4-19.7] - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 [2.68.4-19.6] - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 [2.68.4-19.5] - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 [2.68.4-19.4] - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 [2.68.4-19.3] - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 MODERATE Copyright 2026 Oracle, Inc. CVE-2026-15588 CVE-2026-58010 CVE-2026-58011 CVE-2026-58012 CVE-2026-58013 CVE-2026-58014 CVE-2026-58015 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:8:baseos_patch cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest