[CLSA-2026:1794232636] freerdp: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-09 13:57:32 UTC
Description:
- CVE-2026-121392: TLS certificate CN fallback and IP SAN validation - CVE-2026-121950: integer overflow in GFX surface allocation - CVE-2026-121953: use-after-free on duplicate rdpgfx channel - CVE-2026-121954: planar codec state corruption on failed reset - CVE-2026-121964: heap overflow in rpc_client_recv_fragment - CVE-2026-91947: server DRDYNVC use-after-free
Updated packages:
  • freerdp-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:8f61e05c6b66a7ec510f5d41c8d89f7a3b7080ef9df4d20a3e3afccc7149306b
  • freerdp-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:f7d0e5bd1ed55ee0e4e3ef733f72502e4a1a7ec84cd2a5c3811c5d5a600f974c
  • freerdp-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:d0f2f656d1ff360b7c28ba375cdc3e3381b963d6ed027fe13f1444b6be1d542a
  • freerdp-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:a03e369fd07d7e179c84eb2d16bfac47e7616099e3ed89c2dc2276d4e6bf2224
  • freerdp-libs-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:9efc1f6c7a68f85eda10dfd28165fe93f6d115c56bd0d75c94a96b03d239d250
  • freerdp-libs-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:5611bebd6b5c0e98b079ad36b4d82b3c920962177da364128c934d0d71bf5857
  • libwinpr-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:64935b30de86eb93506ff31894e66dce316a5cffd17a62f627be8d72fdc61bf2
  • libwinpr-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:9eeabcea920c6e3d73dc36af18aac2a2da8a190acf8c3a19cd8ec3eebe3e3823
  • libwinpr-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:9467837a4dd6b91a3579254da287eef3231952eb23f142708b819d50dbca34cb
  • libwinpr-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:4982818b4d89dd0490d6a8e5a731cc1574319d0a6802bad85931859d8dfadaae
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.