[CLSA-2026:1792793194] freerdp: Fix of CVE-2026-55193
Type:
security
Severity:
Important
Release date:
2026-10-24 19:40:34 UTC
Description:
- CVE-2026-55193: fix heap buffer overflow in the TS Gateway RPC client; ensure remaining capacity in rpc_channel_read and reject bind_ack fragment sizes above 0x0FF8
CVEs fixed:
Updated packages:
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els9.i686.rpm
    sha:3e1a31a2e6a1e815418760ca78f47aeea469d5cda1aec10d2e854bb0b67ea29b
  • freerdp-2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64.rpm
    sha:00c05357dc90169adac24178c1d0b9f5bd6f2038728e5df6323d8b6a6c710a2d
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els9.i686.rpm
    sha:6264713a63496140ef5df7af773626fef0fa9e85ebf4587646be7bfeaad65c3a
  • freerdp-devel-2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64.rpm
    sha:04b8f833fb6ad46e871c0510c747cd6f810755c95506e6799cbc6f38e375769c
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els9.i686.rpm
    sha:77ce6d36a8397a3b90b261b5ebfbbb238b09d97b97c2017e81448a6b23968cd4
  • freerdp-libs-2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64.rpm
    sha:9b497cef5b25691cd2aafa7b4afb1690ce8a3cd2aca2d097f46268b6a1a64ffa
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els9.i686.rpm
    sha:a6efddc241eb89d0292212b98effedbfe903b6d761ea4e9cf6395c0898595589
  • libwinpr-2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64.rpm
    sha:e5578120298ffa7628e0fa207b66b0cc1edc3231c5cf515510f3d3686741e2a6
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els9.i686.rpm
    sha:bd2c95efa979425d6f1f2e4843fd6715b049f0a45aebf73d78a57ed511351de9
  • libwinpr-devel-2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64.rpm
    sha:6bcd1eb421a44d6d1d953fa31fffd0242a777bc98517006bdef0f25bee643da3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.