{
  "cves": [
    "CVE-2026-40033",
    "CVE-2026-44420",
    "CVE-2026-44421",
    "CVE-2026-44422",
    "CVE-2026-45700"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[2:3.10.3-12.6]\n- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,\n  CVE-2026-44422, CVE-2026-45700)\n  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093\n\n[2:3.10.3-12.5]\n- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)\n  Resolves: RHEL-159848\n\n[2:3.10.3-12.4]\n- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)\n- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)\n- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)\n- Add DSP format checks (CVE-2026-31884)\n- Fix DSP array bounds checks (CVE-2026-31883)\n- Fix DSP array bounds checks (CVE-2026-31885)\n- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)\n- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)\n- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)\n  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469\n  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931",
  "id": "ELSA-2026-36203",
  "ovalId": "oval:com.oracle.elsa:def:202636203",
  "source": "oracle_linux",
  "title": "ELSA-2026-36203:  freerdp security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-36203.html"
}