Oracle Errata System Oracle Linux 5.11 2026-10-01T19:07:14 Oracle Linux 10 [2.7.3-61] - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribute processing [2.7.3-60] - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input [2.7.3-59] - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog [2.7.3-58] - Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers [2.7.3-57] - expat: backport CVE-2026-45186 fix (attribute collision check DoS) [2.7.3-56] - Rebase to 2.7.3 and add VCS tag * Thu Jun 05 2025 psklenar@redhat.com <psklenar@redhat.com> - https://issues.redhat.com/browse/RHELMISC-13073 * Fri Mar 28 2025 Tomas Korbar <tkorbar@redhat.com> - Fix behavior change caused by fix for CVE-2024-8176 * Fri Mar 14 2025 Tomas Korbar <tkorbar@redhat.com> - Fix CVE-2024-8176 * Thu Nov 07 2024 Tomas Korbar <tkorbar@redhat.com> - Rebase to 2.6.4 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-66046 CVE-2026-93990 cpe:/o:oracle:linux:10:2:baseos_patch cpe:/a:oracle:linux:10::appstream cpe:/o:oracle:linux:10::baseos_latest