[CLSA-2026:1780479407] freerdp: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-06-03 09:37:00 UTC
Description:
- CVE-2026-45700: fix out-of-bounds heap write in planar bitmap decoder bounds check - CVE-2026-44421: fix out-of-bounds heap write in RDPGFX cache-to-surface bounds check
CVEs fixed:
Updated packages:
  • freerdp-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm
    sha:91952a3c05db457aabb62fca7f5688268840bd69d7f27cb75513ffdd886fe898
  • freerdp-devel-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm
    sha:9910c9066858f385a4ea5d31e36972c3abbc37cff5368a9b2f0be0f36d614272
  • freerdp-libs-2.11.7-1.amzn2.0.11.tuxcare.els2.i686.rpm
    sha:21296215316405c0208c359923752f2f44a4cfa574564ca264b7f58cc9f44f45
  • freerdp-libs-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm
    sha:fc898efbb3a3ebb14de49d0ea4a67351cbe37949017c7652cd927e0a516e5ea9
  • libwinpr-2.11.7-1.amzn2.0.11.tuxcare.els2.i686.rpm
    sha:1081a99b2e6515e8664f66f1207afa977ca538b09a99335e81a15c9617692072
  • libwinpr-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm
    sha:00117b69f97398056ecec163cd2adc238a7e5a8b4a322bc08a01343b32ef04ff
  • libwinpr-devel-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm
    sha:baf9765dfe0324c694f3c99bf3f990c39e70ae694705cbaac16851ae57150e8e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.