Oracle Errata System Oracle Linux 5.11 2026-10-26T20:34:37 Oracle Linux 9 [9.16.23-40.0.1.el9_8.12] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.16.23-40.12] - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. [32:9.16.23-40.11] - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) [32:9.16.23-40.10] - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) [32:9.16.23-40.9] - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named [32:9.16.23-40.8] - Fix NSEC3 signer validation (CVE-2026-10723) [32:9.16.23-40.7] - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names [32:9.16.23-40.6] - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) [32:9.16.23-40.5] - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) [32:9.16.23-40.4] - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) MODERATE Copyright 2026 Oracle, Inc. CVE-2026-19662 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder