Oracle Errata System Oracle Linux 5.11 2026-10-23T09:00:22 Oracle Linux 8 [8.0p1-34.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-34] - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 MODERATE Copyright 2026 Oracle, Inc. CVE-2026-59997 CVE-2026-59998 CVE-2026-60000 CVE-2026-60001 CVE-2026-73283 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:10:baseos_patch cpe:/a:oracle:linux:8::appstream