Oracle Errata System Oracle Linux 5.11 2026-10-15T22:10:51 Oracle Linux 10 [3.6.5-20] - CVE-2026-102557 libsoup3: libsoup: Heap buffer overflow during WebSocket message reassembly [3.6.5-19] - CVE-2026-102556 libsoup3: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion [3.6.5-18] - CVE-2026-102558 libsoup3: libsoup: Heap buffer overflow during WebSocket receive-buffer growth [3.6.5-17] - CVE-2026-102555 libsoup3: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding [3.6.5-16] - CVE-2026-102560 libsoup3: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth [3.6.5-15] - CVE-2026-102559 libsoup3: libsoup: Heap buffer overflow during WebSocket client-frame masking [3.6.5-14] - Fix CVE-2026-85197: http2 crash after connection destroyed [3.6.5-13] - Fix CVE-2026-15711: Reject oversized WebSocket control frames [3.6.5-12] - Fix CVE-2026-15709: bound decompressed WebSocket message size [3.6.5-11] - Add patches for CVE-2026-4271 and CVE-2026-5119 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-102555 CVE-2026-102556 CVE-2026-102557 CVE-2026-102558 CVE-2026-102559 CVE-2026-102560 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder