[CLSA-2026:1793054649] freerdp: Fix of 8 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-26 22:44:28 UTC
Description:
- CVE-2026-109242: uninitialised memory use in progressive_tile_allocate() - CVE-2026-109244: world-readable key and fixed PFX password in winpr-makecert - CVE-2026-109254: use-after-free in rdpsnd_recv_wave2_pdu() - CVE-2026-109257: double free in nsc_context_initialize_encode() - CVE-2026-109677: out-of-bounds read in smartcard_LocateCardsByATRA_Call() - CVE-2026-109941: infinite loop on clean TLS shutdown in rdg_chuncked_read() - CVE-2026-109942: NULL pointer dereference in rdg_process_close_packet() - CVE-2026-111377: unbounded memory retention in WTSProcessChannelData()
Updated packages:
  • freerdp-2.11.7-1.amzn2.0.17.tuxcare.els2.aarch64.rpm
    sha:24386183fb182330cb4f8326db396fa4d927499e95c721891b66d4ea11232553
  • freerdp-2.11.7-1.amzn2.0.17.tuxcare.els2.i686.rpm
    sha:25b2c081e689b6f35c9a912a3540dcc0b10c37ff618b1fab4cc56f2015fa7d9c
  • freerdp-2.11.7-1.amzn2.0.17.tuxcare.els2.x86_64.rpm
    sha:151734acb13c34e8661ed937fccdc933b9f0227eef0cb1163312db6e4f98e950
  • freerdp-devel-2.11.7-1.amzn2.0.17.tuxcare.els2.aarch64.rpm
    sha:2b9637aa980c3648a019861ab772528b5b280582a454566194a10ee62547d339
  • freerdp-devel-2.11.7-1.amzn2.0.17.tuxcare.els2.i686.rpm
    sha:19ef1a3c086da20892ef4ba01a86bf3f058fe558b306af59497e67d1d2579158
  • freerdp-devel-2.11.7-1.amzn2.0.17.tuxcare.els2.x86_64.rpm
    sha:fc343866ef47f181958730e504d0200ab0ba544866560529775be7079617bf30
  • freerdp-libs-2.11.7-1.amzn2.0.17.tuxcare.els2.aarch64.rpm
    sha:bfde6dbee6bb03f57af8785b6c401e69ff3cc5201efff2945aa14402a54adc67
  • freerdp-libs-2.11.7-1.amzn2.0.17.tuxcare.els2.i686.rpm
    sha:d22e2ac3c1f675534f5d3de0a4e017a1a9c5b455377715cb9dbe7f8cef28e8f4
  • freerdp-libs-2.11.7-1.amzn2.0.17.tuxcare.els2.x86_64.rpm
    sha:a8a66f08595d9f80e74067c5352ec3de46ab3daed63b0d7e47039e08af789693
  • libwinpr-2.11.7-1.amzn2.0.17.tuxcare.els2.aarch64.rpm
    sha:9096929f4f69986b6a1907a635dcd64df36b739f77b0cf98fb57296af5d52114
  • libwinpr-2.11.7-1.amzn2.0.17.tuxcare.els2.i686.rpm
    sha:a741745cdfc233ee30608d3b8185633af69726a74a0ce26b068647b8ae57bf6e
  • libwinpr-2.11.7-1.amzn2.0.17.tuxcare.els2.x86_64.rpm
    sha:f88ac57b79afa5bf89c041856232ac13041cce718825fc763b817f414a71c7ec
  • libwinpr-devel-2.11.7-1.amzn2.0.17.tuxcare.els2.aarch64.rpm
    sha:d8888d978bdf23f3efc2f109aa23b898ab3ec4ba22d48f5642883d743fb929b6
  • libwinpr-devel-2.11.7-1.amzn2.0.17.tuxcare.els2.i686.rpm
    sha:d0931482d5891097ba1f64566b062d7cf0c1fa84a8f52e65d80655d51274dd09
  • libwinpr-devel-2.11.7-1.amzn2.0.17.tuxcare.els2.x86_64.rpm
    sha:ce171ffa0cbe82ec5f2f299347481daa6640d24af4c9e0aaed708402db048616
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.