[CLSA-2026:1791117866] freerdp: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-04 12:44:37 UTC
Description:
- CVE-2026-55564: fix out-of-bounds read in glyph_cache_get; reject an index equal to the cache size - CVE-2026-55191: fix 32-bit integer overflow in the avc444_ensure_buffer YUV444 buffer size calculation - CVE-2026-55192: reject H.264 frames decoded by openh264 that are smaller than the context dimensions
Updated packages:
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els3.i686.rpm
    sha:a52ddaa60b95115c34d20a260e15af9805525e130ff43a973335bd565f5ef436
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els3.x86_64.rpm
    sha:ec251ec30ed8268fe616469734a349ac9b99cce37fb421412722bf0d5e0e3f11
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els3.i686.rpm
    sha:55241d3723ac473c2f06548ae814588b8a288b72e32124ddecef255fb63c5a07
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els3.x86_64.rpm
    sha:d9d39ac8a34817bcfc8c8f2b3320d81b7b7e013ea482a95e9af7a3ac687f1fce
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els3.i686.rpm
    sha:5e4832734a6cb33413bda68ec6bcb4014f080f89a2405bdbcc3872917aec233f
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els3.x86_64.rpm
    sha:55d5fa305fdec71228cf6412007b48483864ab585974db969f90c428973144df
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els3.i686.rpm
    sha:61fd1ad5aeb9c785e6920791eeceb77863a137aada3b4b6f45b83f9e03189a8b
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els3.x86_64.rpm
    sha:14c8bde3a8efedb8f1be803a5cf031d164dc87f22788a73bb3c4b3bf4c1c2e53
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els3.i686.rpm
    sha:534f80737ce4a822d74529a4db46efec18cbf532cff5a978ffa14a561c836aa3
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els3.x86_64.rpm
    sha:35e2844ff85101d22f9922ab7fb7390fcdb1040454291fd7996a8fa863514143
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.