Oracle Errata System Oracle Linux 5.11 2026-10-22T21:51:52 Oracle Linux 10 [2.7.3-63] - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expat_realloc [2.7.3-62] - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over- read in XML_ParseBuffer [2.7.3-61] - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribute processing [2.7.3-60] - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input [2.7.3-59] - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog [2.7.3-58] - Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers [2.7.3-57] - expat: backport CVE-2026-45186 fix (attribute collision check DoS) [2.7.3-56] - Rebase to 2.7.3 and add VCS tag * Thu Jun 05 2025 psklenar@redhat.com <psklenar@redhat.com> - https://issues.redhat.com/browse/RHELMISC-13073 * Fri Mar 28 2025 Tomas Korbar <tkorbar@redhat.com> - Fix behavior change caused by fix for CVE-2024-8176 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-102633 CVE-2026-77214 cpe:/o:oracle:linux:10:2:baseos_patch cpe:/a:oracle:linux:10::appstream cpe:/o:oracle:linux:10::baseos_latest