[CLSA-2026:1794228753] freerdp: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 16:00:11 UTC
Description:
- CVE-2026-121392: TLS certificate CN fallback and IP SAN validation - CVE-2026-121950: integer overflow in GFX surface allocation - CVE-2026-121953: use-after-free on duplicate rdpgfx channel - CVE-2026-121954: planar codec state corruption on failed reset - CVE-2026-121964: heap overflow in rpc_client_recv_fragment - CVE-2026-91947: server DRDYNVC use-after-free
Updated packages:
  • freerdp-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:e4f07dba3a84f7059b53ab2eac9d3e2d681c426b68a5375cbabe00de9ad17402
  • freerdp-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:e7bb2c2a8caa290d06d8b1882ec5ebba2e9d8c038a033d38e76c498f9600f2b6
  • freerdp-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:d06afd71231c20d251de8ba4eed956389ca61238dabdc173341bb3f14c377aa0
  • freerdp-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:c4ff805cc2ff88351c7b11bfd73904c8fb395f053ed220d862a4ced8319a3de2
  • freerdp-libs-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:c4ee81c789ade721c17dcab61176be844cb922fcd35ff22febc1082f0e4492e1
  • freerdp-libs-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:c67d6a0590c3e58a464c38eee57755741b0766d5b9b8a03ad841f4a73f428127
  • libwinpr-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:79133934c0dd13b8780ad41a80b2ee9f682065e49ed88b4cc25cddf6ab06bf40
  • libwinpr-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:bb5448cbae2008fc1d7733c665f367a6ab63f916ae96e3c57719db90c5775489
  • libwinpr-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:43baa8b64996302e755fd87047e5016c4e2bc9ca886573fe76c5207957022ea5
  • libwinpr-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:25a2b71aefe13305b9f963ae2e14935a96b07a5c35f31d663792272d720774b1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.