Release date:
2026-08-26 14:14:10 UTC
Description:
- CVE-2026-67299: fix use-after-free in update_message_WindowIcon;
deep-copy ICON_INFO into the queued async message instead of aliasing
the parser-owned struct, which is freed once the parser callback
returns, and clear the copied bitsColor/bitsMask/colorTable pointers
so the out_fail path cannot free parser-owned buffers
Updated packages:
-
freerdp-2.1.1-5.el7_9.tuxcare.els26.x86_64.rpm
sha:1aca1a8c668250da46f43a1cc7a9c715fe6b0c7e221fd06a2b308f21160ac670
-
freerdp-devel-2.1.1-5.el7_9.tuxcare.els26.i686.rpm
sha:b2c0c1d366d8f537b045797f10fa8ef43a6bbf8cf76f68bc082f7a159c25186f
-
freerdp-devel-2.1.1-5.el7_9.tuxcare.els26.x86_64.rpm
sha:1c3d25f433ca843e994a980eb0db50bbba00b3fc89265b9ac36ef2b10d1a47d0
-
freerdp-libs-2.1.1-5.el7_9.tuxcare.els26.i686.rpm
sha:e0ffb8887acd32640ba06656bf7182ca174f1f37377142b347e0aaf9ee0a4bd1
-
freerdp-libs-2.1.1-5.el7_9.tuxcare.els26.x86_64.rpm
sha:d66b34c12b4305d25488126bbe23c6e4f682485b44fcc7c0f44d891d4cf066e1
-
libwinpr-2.1.1-5.el7_9.tuxcare.els26.i686.rpm
sha:94233a93eeba4d79527e1a689c705afd2cc33ac25d4f7e9fd4dcb76e05672e58
-
libwinpr-2.1.1-5.el7_9.tuxcare.els26.x86_64.rpm
sha:95e7ff3b2848423dde661573e47654c03e23c752da992cb6684090a2707ba9a5
-
libwinpr-devel-2.1.1-5.el7_9.tuxcare.els26.i686.rpm
sha:2e2e0c6b3cc899ec06f67e9373630b9f6bad4021d36082d51ecb773612f8ed71
-
libwinpr-devel-2.1.1-5.el7_9.tuxcare.els26.x86_64.rpm
sha:c57b4d52dc8464f999b026e93220ab5f0969f33dbd960284f4ee9e4395004a3f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
