Release date:
2026-09-11 15:12:20 UTC
Description:
- CVE-2026-67288: NULL pointer dereference on a smartcard cache read whose
szLookupName NDR pointer is zero; completes the vendor's backport, which left
"data" uninitialised in PCSC_SCardReadCacheA() and the HashTable lookup in
PCSC_SCardReadCacheW() unguarded against the resulting NULL key
Updated packages:
-
freerdp-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm
sha:9fac0d2613a2f8e1304f5045bf851eb4ce0eaee3c799534a57f043616599cb23
-
freerdp-devel-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm
sha:fb4e45219f649b905b5af579becb95ee6219129e0ed79e766b23adbe4ec9980f
-
freerdp-libs-2.11.7-1.amzn2.0.14.tuxcare.els2.i686.rpm
sha:a8e55858f9f2f9d75355566e1d0e19827ab7b14fd94a56c58c6cfbbda42669c3
-
freerdp-libs-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm
sha:99d33dc667317bc245537a4de1f13dafb9d290cc077a7b19b2e5d0be3924c127
-
libwinpr-2.11.7-1.amzn2.0.14.tuxcare.els2.i686.rpm
sha:773695fe6ae2d745ba38b894808037e5f8b457b1def192a88fb499f26870ae1d
-
libwinpr-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm
sha:266258d5df66cc4d8e940802176026615b30d51dfed8e364924fc18b671968fb
-
libwinpr-devel-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm
sha:914f3a8325b8ad582935078aa93041c8027bcf55a5fe277b65be0118806e897d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
