Release date:
2026-10-24 02:29:02 UTC
Description:
- CVE-2026-111880: fix heap out-of-bounds write in NTLM MIC computation;
validate the MIC offset against the AUTHENTICATE_MESSAGE length
- CVE-2023-39354: fix out-of-bounds read in nsc_rle_decompress_data;
check that the stream holds the declared plane lengths
- CVE-2026-109244: winpr-makecert: create key and certificate files with
owner-only permissions and use a random export password
- CVE-2026-109257: NSCodec encoder: free plane buffers in one place to
avoid a double free
- CVE-2026-109677: smartcard: validate cbAtr against the rgbAtr size when
unpacking LocateCardsByATR and reader states
- CVE-2026-111377: server: abort static channel reassembly when fragments
exceed the declared total size
Updated packages:
-
freerdp-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:a82dc6d0776dcc2c7ace4c59ff64d71634f591200a6308d93e1ee628d3ccfa0a
-
freerdp-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:8036d7cbfa1bfe6f4a2d46420748473b09554c05c3826c52d1192e4cf20f6be2
-
freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:1b7e98472276d35b49fadd5ff3257d8b28841874a0b7ee82904eaff5a119f59f
-
freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:4f2fd68ebb40a85db0934885cd48f2e3d4c91b6728966a242ca4038e3a7d2c76
-
freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:6e1fc9219d990d35d78508b98d14c88e6a240472577a2e9f0f623ca70f166520
-
freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:2f9175ec1cb38ed653f35b097f8627eb62be17a2ecc0f5606b553f6b548922b9
-
libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:0478af4cbfc368def93b8e04740456f3779a46cc9cfbf761eca442b3e37a499e
-
libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:7687ff10b865c3b4dc13f469f25994cb32c97833d6dceb4a0b4f5ab4ec699a53
-
libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.i686.rpm
sha:9137498ceabe2d05aa6c0b681d465c8ed3efd5e09bf2138175d70d867a1f97d0
-
libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64.rpm
sha:c381c890c7941ff65a7f709762a9ab28190575fca52d8517f18b7822cda4a806
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
