Release date:
2026-10-24 16:56:32 UTC
Description:
- CVE-2026-111880: fix heap out-of-bounds write in NTLM MIC computation;
validate the MIC offset against the AUTHENTICATE_MESSAGE length
- CVE-2023-39354: fix out-of-bounds read in nsc_rle_decompress_data;
check that the stream holds the declared plane lengths
- CVE-2026-109244: winpr-makecert: create key and certificate files with
owner-only permissions and use a random export password
- CVE-2026-109257: NSCodec encoder: free plane buffers in one place to
avoid a double free
- CVE-2026-109677: smartcard: validate cbAtr against the rgbAtr size when
unpacking LocateCardsByATR and reader states
- CVE-2026-111377: server: abort static channel reassembly when fragments
exceed the declared total size
Updated packages:
-
freerdp-2.1.1-5.0.9.el7_9.tuxcare.els8.aarch64.rpm
sha:374c37552804c368036c518054f21c2b58ff05f412f2dd0fdd621e76e913eb92
-
freerdp-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:bd467b97e3ad464315d60b64fd2d2fc1512950be919e9be6f730ed27fc81ed1d
-
freerdp-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:1ed1cddd694d6caf5adc485aefde450633e9b4ee11ab5a2e27566ff604902d87
-
freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.aarch64.rpm
sha:a25319bb57bf39e8ea87f6d46483b7eb77f098b00b792385f858e116c450e66e
-
freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:083473787744600a6f871ab5f557950d1c659eeec63b871ebddf62796eeb411e
-
freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:b539e36fe12cfde8000bb68739a00d0f3f3a7c8d7503dcaa7b6f418e3054d931
-
freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els8.aarch64.rpm
sha:ca1d26f6a9066d9e555576fe35ae755ff290b59eb93115dbb00acfa415fbc547
-
freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:34ff057741c6d1363b3c0c35ce01aa0fbefb0860b875a49d26b91de1c4960b55
-
freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:744059d6480e6ade22f29d2bcdf40a991a1c0545014b98aec159518bb284c682
-
libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els8.aarch64.rpm
sha:e0d4da6a5381c84b36e837a737f3d14bac50dfb030e6e60aff188d32881c17ef
-
libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:580eaef5815edc3326dd84c45a9f8044517b7df9243a6b89853b40a8bc76f0f1
-
libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:07e101930c66f8932e4703fc6b9beee56f1c2349634bde8dde98f2b85060d4a4
-
libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.aarch64.rpm
sha:c367e0f6775ed26719df4f0d32fb8d6f2d0ebb2e28fbee4f415d23915301aed8
-
libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:b42edf74bd4ee521cf060be3b041cdbf2af1a02a74a8179f7d792ef02f1654e1
-
libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:0e66bb39d7512d71ef149925683b9151f34747dff3e0d6f38f790ff9f6e035ac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
