Oracle Errata System Oracle Linux 5.11 2026-09-15T15:56:18 Oracle Linux 9 [1.4.0-3.0.1] - Change distroname_ext in spec file to oracle [1.4.0-3] - Remove ansi_cprng test as new kernels don't support it Resolves: RHEL-242707 - Add tag processing in AEAD decryption without ciphertext Resolves: RHEL-242667 - CVE-2026-71226: Fix memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path Resolves: RHEL-224815 - CVE-2026-71227: Fix infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return Resolves: RHEL-224976 - CVE-2026-71225: Fix IV reuse in libkcapi one-shot symmetric cipher chunking Resolves: RHEL-224704 MODERATE Copyright 2026 Oracle, Inc. CVE-2026-71225 CVE-2026-71226 CVE-2026-71227 cpe:/o:oracle:linux:9:8:baseos_patch cpe:/o:oracle:linux:9::baseos_latest