Oracle Errata System Oracle Linux 5.11 2026-09-08T21:13:50 Oracle Linux 10 [2.80.4-22] - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap [2.80.4-21] - Fix CVE-2026-15588: limit D-Bus auth line read length [2.80.4-20] - Fix CVE-2026-58011: range validation in g_date_time_add_full() [2.80.4-19] - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW [2.80.4-18] - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking [2.80.4-17] - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context [2.80.4-16] - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list [2.80.4-15] - Fix CVE-2026-58013: GIOChannel memcmp buffer over-read [2.80.4-14] - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation [2.80.4-13] - Fix CVE-2025-14087 and CVE-2025-14512 MODERATE Copyright 2026 Oracle, Inc. CVE-2026-16118 cpe:/o:oracle:linux:10:2:baseos_patch cpe:/a:oracle:linux:10::appstream cpe:/o:oracle:linux:10::baseos_latest cpe:/a:oracle:linux:10::codeready_builder