[CLSA-2026:1794228382] freerdp: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-09 12:46:35 UTC
Description:
- CVE-2026-121392: TLS certificate CN fallback and IP SAN validation - CVE-2026-121950: integer overflow in GFX surface allocation - CVE-2026-121953: use-after-free on duplicate rdpgfx channel - CVE-2026-121954: planar codec state corruption on failed reset - CVE-2026-121964: heap overflow in rpc_client_recv_fragment - CVE-2026-91947: server DRDYNVC use-after-free
Updated packages:
  • freerdp-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:0f73080190bea3d0f27d8907ba9c4e6b263548e37f41bf85d962515a089ea667
  • freerdp-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:b28ce96ac0f17e11f2b3a4c936fc8721b5bfbdd39449ab9624bf773e2fa001f0
  • freerdp-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:cbe80311c57cdd7e62542c26676e3060c5d6e91f207168957e9d13c3f1f22a2b
  • freerdp-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:f0a1fcdaff163cf5513d89ef5052db023ed4c7a9be674044b239e72e1ab7f9ed
  • freerdp-libs-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:0828f538e6bb0d87d87e1a16293309db503aa1fc70dc2c70f45ac1f45485d26f
  • freerdp-libs-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:fa600bb2161668fc798fe5202bb1d5fcbda05d622340a69d372c3519ec8473d4
  • libwinpr-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:d2960f9ac76597464150acb55d064e4eead6add061ff6aa70dbeb4f7f55708aa
  • libwinpr-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:e939bc59cab54519cff15fe84623aec9ba7704f3c71e62f8cbd9a2332762349d
  • libwinpr-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.i686.rpm
    sha:56801af92f88c81c86100a06f4d0416484eeabfbbc055b99a3ad3ac91da6e21b
  • libwinpr-devel-2.1.1-5.0.13.el7_9.tuxcare.els2.x86_64.rpm
    sha:fc91c0106fa6c17c9edd6ee6cce8e12d840bcbc7c8f5f05e1e0a31c906cf1108
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.