Oracle Errata System Oracle Linux 5.11 2026-05-11T20:48:47 Oracle Linux 10 [2:3.10.3-5.8] - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159803, RHEL-159659, RHEL-161033, RHEL-161468 Resolves: RHEL-161504, RHEL-161071, RHEL-163653, RHEL-167791, RHEL-162930 MODERATE Copyright 2026 Oracle, Inc. CVE-2026-25952 CVE-2026-25997 CVE-2026-26986 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33982 CVE-2026-33985 CVE-2026-33987 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder