[CLSA-2026:1771011053] freerdp: Fix of CVE-2026-22855
Type:
security
Severity:
Critical
Release date:
2026-02-13 19:31:20 UTC
Description:
- CVE-2026-22855: fix heap out-of-bounds read in smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length
Updated packages:
  • freerdp-2.1.1-5.el7_9.tuxcare.els11.x86_64.rpm
    sha:a1cf44ad68b1b69d71f2682ae807c987c9710a8db2114e10d48e03767f8ab8bb
  • freerdp-devel-2.1.1-5.el7_9.tuxcare.els11.i686.rpm
    sha:e5d9c12358276b88299b507bdd2a406478e6de0a9fe16305fd68f905651e13cf
  • freerdp-devel-2.1.1-5.el7_9.tuxcare.els11.x86_64.rpm
    sha:d65382c0c172f659dfedb0d1fa33642b5114eb446e970720d3f3eddb9e74e20c
  • freerdp-libs-2.1.1-5.el7_9.tuxcare.els11.i686.rpm
    sha:e7de266b5fea4efb1f73c98628418467c28954117bd8ae66585950fa56cf9d34
  • freerdp-libs-2.1.1-5.el7_9.tuxcare.els11.x86_64.rpm
    sha:8190765cda2548673a20a713238ec80e605812a5134f6ab0352d5d70a3207e7e
  • libwinpr-2.1.1-5.el7_9.tuxcare.els11.i686.rpm
    sha:d643a0b116f5589f5f63aa4b8282acd9ab817145fd3c4ad093a8fc1b279f340f
  • libwinpr-2.1.1-5.el7_9.tuxcare.els11.x86_64.rpm
    sha:bc8d06f6c1c12e9d783830322595919f647ace0bdb05e073fc47ceff6ae21dad
  • libwinpr-devel-2.1.1-5.el7_9.tuxcare.els11.i686.rpm
    sha:ccb6a5c8ed00e569da51e088284b1f21bc5397a513c99b296edae4787692b3c6
  • libwinpr-devel-2.1.1-5.el7_9.tuxcare.els11.x86_64.rpm
    sha:0b67c918b687badc38ae7ae33f194dc84884ddff93d37fe26af9ec13dc34d06c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.