Summary
[2.1.1-5.0.5]
- Fixed CVE-2026-26955 CVE-2026-26956 [Orabug: 39189643]
[2:2.2.0-5.0.3]
- Fixed CVE-2026-22855 CVE-2026-22858 CVE-2026-22859 [Orabug: 39075086]
[2:2.2.0-5.0.1]
- fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533
CVE-2026-23884 [Orabug: 38971897]
[2:2.2.0-5]
- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscan
[2:2.2.0-4]
- Refactored RPC gateway parser (rhbz#2017944)
[2.1.1-3]
- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)
[2.1.1-2]
- Update to 2.1.1 (#1834286)
[2.0.0-4.rc4]
- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)
[2.0.0-2.rc4]
- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)
[2.0.0-1.rc4]
- Update to 2.0.0-rc4 (#1291254)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | freerdp | 0:2.1.1-5.0.5.el7_9 |
| Oracle Linux · 7 | freerdp-devel | 0:2.1.1-5.0.5.el7_9 |
| Oracle Linux · 7 | freerdp-libs | 0:2.1.1-5.0.5.el7_9 |
| Oracle Linux · 7 | libwinpr | 0:2.1.1-5.0.5.el7_9 |
| Oracle Linux · 7 | libwinpr-devel | 0:2.1.1-5.0.5.el7_9 |
Vulnerabilities 2
-
High 8.8
FreeRDP has Out-of-bounds Write
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by sending an RDPGFX ClearCodec surface co…
-
High 8.8
FreeRDP has Out-of-bounds Write
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) * nDstStep) + (4*nXDst) + nChannel` without verifying that `(nYDst+n…