Oracle Errata System Oracle Linux 5.11 2026-04-08T19:34:24 Oracle Linux 9 [1.24.0-5.2.0.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-5.2] - Resolves: RHEL-157886 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159445 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159558 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159537 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file [1:1.24.0-5.1] - Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) [1:1.24.0-5] - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) [1:1.24.0-4] - Resolves: RHEL-49350 - nginx worker processes memory leak [1:1.24.0-3] - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx [1:1.24.0-2] - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-32647 cpe:/a:oracle:linux:9::appstream