elsa-2026-36203

oracle_linux
Description

[2:3.10.3-12.6] - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 [2:3.10.3-12.5] - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 [2:3.10.3-12.4] - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-40033",
    "CVE-2026-44420",
    "CVE-2026-44421",
    "CVE-2026-44422",
    "CVE-2026-45700"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[2:3.10.3-12.6]\n- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,\n  CVE-2026-44422, CVE-2026-45700)\n  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093\n\n[2:3.10.3-12.5]\n- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)\n  Resolves: RHEL-159848\n\n[2:3.10.3-12.4]\n- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)\n- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)\n- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)\n- Add DSP format checks (CVE-2026-31884)\n- Fix DSP array bounds checks (CVE-2026-31883)\n- Fix DSP array bounds checks (CVE-2026-31885)\n- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)\n- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)\n- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)\n  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469\n  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931",
  "id": "ELSA-2026-36203",
  "ovalId": "oval:com.oracle.elsa:def:202636203",
  "source": "oracle_linux",
  "title": "ELSA-2026-36203:  freerdp security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-36203.html"
}
View JSON API Download JSON