Oracle Errata System Oracle Linux 5.11 2026-09-17T13:37:22 Oracle Linux 10 [3.6.5-14] - Fix CVE-2026-85197: http2 crash after connection destroyed [3.6.5-13] - Fix CVE-2026-15711: Reject oversized WebSocket control frames [3.6.5-12] - Fix CVE-2026-15709: bound decompressed WebSocket message size [3.6.5-11] - Add patches for CVE-2026-4271 and CVE-2026-5119 [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-15709 CVE-2026-15711 CVE-2026-85197 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder