Oracle Errata System Oracle Linux 5.11 2026-04-17T11:10:01 Oracle Linux 7 [3.6.8-21.0.9] - Security update CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 [Orabug: 39159999] [3.6.8-21.0.7] - Security update CVE-2025-12084 [Orabug: 38971895] [3.6.8-21.0.5] - tarfile now validates archives to ensure member offsets are non-negative [Orabug: 38442771][CVE-2025-8194] [3.6.8-21.0.3] - Fix DoS parsing crafted tarfile headers [Orabug: 37626372][CVE-2024-6232] - Disable test_socket in the PGO profile task. MODERATE Copyright 2026 Oracle, Inc. CVE-2025-15366 CVE-2025-15367 CVE-2026-1299 cpe:/a:oracle:linux:7:9:latest_ELS