[CLSA-2026:1793727959] freerdp: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-03 17:46:12 UTC
Description:
- CVE-2026-55194: fix heap buffer overflow in TS Gateway RPC response reassembly; ensure remaining capacity for the actual stub length - CVE-2026-55648: add an overflow-safe cbBitsColor source length check to freerdp_image_copy_from_icon_data
Updated packages:
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els7.i686.rpm
    sha:b7c58aeef46c486d79d9a52f34ca4d49143d53c1a9dffdae679746bddbf71a0d
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els7.x86_64.rpm
    sha:cd54e86e96ac2214a0866e30c3e750b7b45ac345058dd502dbfaebf42be1a711
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els7.i686.rpm
    sha:835371c1022250a5f107932d2047f71ec81e8d55eabfecbefa2d147ecca0d575
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els7.x86_64.rpm
    sha:796386aac0e9ba5efcbb4ba289b86b271f11175d52d152d20353c9a3010ac372
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els7.i686.rpm
    sha:751c446d9011fec1337b67b353e80fa1a21f0bf3bd9ea937f7c1b4d1dd3451b9
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els7.x86_64.rpm
    sha:d26ba1f92505efe8e1cbd132affa5ff3122227434560bb4a294fa06f8e4eceaf
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els7.i686.rpm
    sha:65e7286ff1fc9db15c295a2a75ff2d0b2f1e2be220fc67c6ea27849e2bc94194
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els7.x86_64.rpm
    sha:6f24747f524efd85cfc0deeed7f5fcea4af7005d62e1ce679c93296a90f72619
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els7.i686.rpm
    sha:72845459923957f9343d54ec9a148115b543ad4dbc9472390f1e5b9cdba26948
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els7.x86_64.rpm
    sha:bf9719f1c96f67ffb1dcc1a9a42ff42cf05bc4a3181cec1cf9011d7d65b4723b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.