{"cves":["CVE-2026-40033","CVE-2026-44420","CVE-2026-44421","CVE-2026-44422","CVE-2026-45700"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[2:3.10.3-12.6]\n- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,\n  CVE-2026-44422, CVE-2026-45700)\n  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093\n\n[2:3.10.3-12.5]\n- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)\n  Resolves: RHEL-159848\n\n[2:3.10.3-12.4]\n- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)\n- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)\n- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)\n- Add DSP format checks (CVE-2026-31884)\n- Fix DSP array bounds checks (CVE-2026-31883)\n- Fix DSP array bounds checks (CVE-2026-31885)\n- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)\n- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)\n- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)\n  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469\n  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931","id":"ELSA-2026-36203","ovalId":"oval:com.oracle.elsa:def:202636203","source":"oracle_linux","title":"ELSA-2026-36203:  freerdp security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-36203.html"}