[CLSA-2026:1785561679] freerdp: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-04 23:31:35 UTC
Description:
- CVE-2026-57158: fix 1-byte out-of-bounds heap read in planar_decompress_plane_rle_only; move the input-buffer bounds check ahead of the control-byte read so a truncated RLE plane payload is rejected before dereferencing past the input buffer
Updated packages:
  • freerdp-2.1.1-5.el7_9.tuxcare.els24.x86_64.rpm
    sha:740998ca256899b5c7324ba9892184be8647fd718ab25b7eafb60f425709ad7d
  • freerdp-devel-2.1.1-5.el7_9.tuxcare.els24.i686.rpm
    sha:ca383aad1697f5d0e2081d71f10e209553f5ce73f4ed3344d91a02cc7e2ba8e5
  • freerdp-devel-2.1.1-5.el7_9.tuxcare.els24.x86_64.rpm
    sha:dae7eaa1c926a4ab8fe43c89524596b973353c637d56a3fbffe3468a4d3f714d
  • freerdp-libs-2.1.1-5.el7_9.tuxcare.els24.i686.rpm
    sha:7943db48aca86eecb56ac8e04425c1e1f14faba0ab11a24ccc26bb4a48e80b03
  • freerdp-libs-2.1.1-5.el7_9.tuxcare.els24.x86_64.rpm
    sha:7c5cad9ca2222a2e216af0b4ad17e86f5a193f3e6216e71329f92ea2e2aa6f58
  • libwinpr-2.1.1-5.el7_9.tuxcare.els24.i686.rpm
    sha:2ea29f587ee7dc8981be44381158659ae99430b2a850595568f653805ef9ad40
  • libwinpr-2.1.1-5.el7_9.tuxcare.els24.x86_64.rpm
    sha:003b6e9f50908e7eee85a63a43a2a123de450fe0f10c8fdbf48bc5865ad13761
  • libwinpr-devel-2.1.1-5.el7_9.tuxcare.els24.i686.rpm
    sha:9c8952317eeb0723835f6dcb0fcb3dfdccc9870cb587506fbddb599c2a95d642
  • libwinpr-devel-2.1.1-5.el7_9.tuxcare.els24.x86_64.rpm
    sha:f9b3c267307010267baaa71b1990d8c240f61658caed2b3e999b6a232b229f2e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.