Oracle Errata System Oracle Linux 5.11 2026-09-01T21:19:50 Oracle Linux 8 [2.56.4-177] - Fix CVE-2026-15588: limit D-Bus auth line read length [2.56.4-176] - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking [2.56.4-175] - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 [2.56.4-174] - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 [2.56.4-173] - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 [2.56.4-172] - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 [2.56.4-171] - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 MODERATE Copyright 2026 Oracle, Inc. CVE-2026-15588 CVE-2026-58010 CVE-2026-58011 CVE-2026-58012 CVE-2026-58013 CVE-2026-58014 CVE-2026-58015 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:10:baseos_patch cpe:/a:oracle:linux:8::codeready_builder