[CLSA-2026:1774438942] freerdp: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-03-27 12:29:24 UTC
Description:
- CVE-2026-29774: heap buffer overflow in H.264 AVC420/AVC444 YUV-to-RGB conversion - CVE-2026-31884: division by zero in ADPCM decoders when nBlockAlign is 0 - CVE-2026-29775: off-by-one in bitmap_cache_put
Updated packages:
  • freerdp-2.1.1-5.el7_9.tuxcare.els18.x86_64.rpm
    sha:aa25e53f980544a7727ddd274ddc85f59b5fa63c88f5851cd24e0c018207b83a
  • freerdp-devel-2.1.1-5.el7_9.tuxcare.els18.i686.rpm
    sha:e3b8ed7cc94308061463c1bd8af2b89c363447d9e80e4ff25df8bace13ce9b08
  • freerdp-devel-2.1.1-5.el7_9.tuxcare.els18.x86_64.rpm
    sha:f81cb15d476e08564e1e382b20f913b3bf8a8fd215f2d680778e4157cf052a0d
  • freerdp-libs-2.1.1-5.el7_9.tuxcare.els18.i686.rpm
    sha:fddcc90517530f9d4d170bcd173d04e511986d0064f6e4041d004a5b7353728f
  • freerdp-libs-2.1.1-5.el7_9.tuxcare.els18.x86_64.rpm
    sha:b1ca4a7bf9beeaf7e8f026668854dbcc0856c8c889dda3475eab44fd8081ad91
  • libwinpr-2.1.1-5.el7_9.tuxcare.els18.i686.rpm
    sha:e49e993e589c73aa28a3cbbede88b62f77c0576775f0b13b0e440a239565b771
  • libwinpr-2.1.1-5.el7_9.tuxcare.els18.x86_64.rpm
    sha:e027b939345581c201b39e5a440a40bfc29e5b8b91ca5faf9eea401d252a68fb
  • libwinpr-devel-2.1.1-5.el7_9.tuxcare.els18.i686.rpm
    sha:9022f7727e9878272ec34a324123a5989ee7deafd68b3aae9b3e03bd581a94b2
  • libwinpr-devel-2.1.1-5.el7_9.tuxcare.els18.x86_64.rpm
    sha:4030281e895bf37b338da7ff2db015d8738248e5241941931b804869fabec698
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.