[CLSA-2026:1792157679] freerdp: Fix of CVE-2026-109242
Type:
security
Severity:
Important
Release date:
2026-10-16 13:34:50 UTC
Description:
- CVE-2026-109242: allocate the aligned buffers behind progressive tiles, RemoteFX tiles, GDI surfaces and glyph conversion with _aligned_recalloc() instead of _aligned_malloc(), so an un-decoded progressive tile can no longer render uninitialized heap memory
CVEs fixed:
Updated packages:
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els6.i686.rpm
    sha:d6b7311dee9ac5a95cfb3e293e16246237a6f228f379673fb0aa3b12729f4e5e
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els6.x86_64.rpm
    sha:9b2b05cd9989cf3d699c3bace66cb4cdf697c620d7e8883601297b7b81f466e1
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els6.i686.rpm
    sha:fec123d9f88a7c789feaecf9f5ebb983e6f674c2ae880abd7c5e5296e3bc530d
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els6.x86_64.rpm
    sha:be201c83c55f61993045c564ed46353e3d98ab6dc84055f902dba1cd81b9fa1a
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els6.i686.rpm
    sha:409003eaff0a222ef9fbdf4dd46eacf008b37dfdc539148269e3dd6c8ed1d2c5
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els6.x86_64.rpm
    sha:1f6158bb908e1769bee7eff3a01b212ccf159b674b97285c772401afa5af48c1
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els6.i686.rpm
    sha:4318d5b2b5ab7042a07da5dec3b45e7ed5c734666e08c09ccf0fde0f7af3c24f
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els6.x86_64.rpm
    sha:66515848fe5fd0390c6a80445008833a1133967cf1d5840224589595c7876223
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els6.i686.rpm
    sha:188f2b83becadf68a6727cb2557ce8d9f37ad7f6f664bedde304bae23ec4899e
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els6.x86_64.rpm
    sha:6adb9571a5411bd7452834528631ef31fdfa040c8b1a704ae8a0f8c4e60f95fa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.