ALT-PU-2026-17187

Высокий

ALT-PU-2026-17187: package freerdp3 update to version 3.32.1-alt1

Источник

errata.altlinux.org

Дата публикации

07.10.2026

Дата обновления

05.11.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades freerdp3 to version 3.32.1-alt1.

Устраненные уязвимости84

BDU:2026-16607

Высокий 7.1

Дата публикации: 16.10.2026

Уязвимость функции winpr_aligned_malloc() RDP-клиента FreeRDP, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании

CVSS 3.1

Высокий 7.1

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: Low
Integrity: None
Availability: High

CVSS 2.0

Высокий 8.5

AV:N/AC:L/Au:N/C:P/I:N/A:C

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: Complete

Ссылки

BDU:2026-16607 https://bdu.fstec.ru/vul/2026-16607

Ссылки67

ALT-PU-2026-17187 https://errata.altlinux.org/ALT-PU-2026-17187

GHSA-262p-h989-vmpv

https://github.com/advisories/GHSA-262p-h989-vmpv

GHSA-26cc-wjh8-hjw6

https://github.com/advisories/GHSA-26cc-wjh8-hjw6

GHSA-27m7-gwhh-6hhf

https://github.com/advisories/GHSA-27m7-gwhh-6hhf

GHSA-2jfv-j3wx-5cg4

https://github.com/advisories/GHSA-2jfv-j3wx-5cg4

GHSA-3m9q-g533-rqjq

https://github.com/advisories/GHSA-3m9q-g533-rqjq

GHSA-3mq5-xh88-9v62

https://github.com/advisories/GHSA-3mq5-xh88-9v62

GHSA-3rvr-qvx8-rj23

https://github.com/advisories/GHSA-3rvr-qvx8-rj23

GHSA-4mpr-hmqx-83q8

https://github.com/advisories/GHSA-4mpr-hmqx-83q8

GHSA-4ww8-3vqm-jgcf

https://github.com/advisories/GHSA-4ww8-3vqm-jgcf

GHSA-52xc-5973-w5vv

https://github.com/advisories/GHSA-52xc-5973-w5vv

GHSA-5cgr-vmp8-fmvj

https://github.com/advisories/GHSA-5cgr-vmp8-fmvj

GHSA-5xjc-c64q-m8r6

https://github.com/advisories/GHSA-5xjc-c64q-m8r6

GHSA-6rj3-rf6g-3vw5

https://github.com/advisories/GHSA-6rj3-rf6g-3vw5

GHSA-6vjv-4hm3-6698

https://github.com/advisories/GHSA-6vjv-4hm3-6698

GHSA-72qv-gcph-rfwf

https://github.com/advisories/GHSA-72qv-gcph-rfwf

GHSA-7vfc-chg9-q5r8

https://github.com/advisories/GHSA-7vfc-chg9-q5r8

GHSA-83g2-gf92-5c4g

https://github.com/advisories/GHSA-83g2-gf92-5c4g

GHSA-87v8-2gwr-ww9j

https://github.com/advisories/GHSA-87v8-2gwr-ww9j

GHSA-8rpr-jjjg-5qv6

https://github.com/advisories/GHSA-8rpr-jjjg-5qv6

GHSA-93g7-296p-j77j

https://github.com/advisories/GHSA-93g7-296p-j77j

GHSA-945c-qq5h-jqwp

https://github.com/advisories/GHSA-945c-qq5h-jqwp

GHSA-96rv-gf42-7wq9

https://github.com/advisories/GHSA-96rv-gf42-7wq9

GHSA-97pf-pwp3-2wrv

https://github.com/advisories/GHSA-97pf-pwp3-2wrv

GHSA-996j-34w6-5hgm

https://github.com/advisories/GHSA-996j-34w6-5hgm

GHSA-99p4-8j24-wvj4

https://github.com/advisories/GHSA-99p4-8j24-wvj4

GHSA-9qqc-m43j-g4r2

https://github.com/advisories/GHSA-9qqc-m43j-g4r2

GHSA-9qr4-rgq4-jfp8

https://github.com/advisories/GHSA-9qr4-rgq4-jfp8

GHSA-c3rh-2hv6-7hf2

https://github.com/advisories/GHSA-c3rh-2hv6-7hf2

GHSA-c49c-xm94-5qf3

https://github.com/advisories/GHSA-c49c-xm94-5qf3

GHSA-chh2-527f-x255

https://github.com/advisories/GHSA-chh2-527f-x255

GHSA-cmgx-558f-vh67

https://github.com/advisories/GHSA-cmgx-558f-vh67

GHSA-cq4m-gwc5-w8rc

https://github.com/advisories/GHSA-cq4m-gwc5-w8rc

GHSA-f3vg-h45x-6wgf

https://github.com/advisories/GHSA-f3vg-h45x-6wgf

GHSA-f46f-pxh9-w2rh

https://github.com/advisories/GHSA-f46f-pxh9-w2rh

GHSA-f4pf-pgp4-f2r3

https://github.com/advisories/GHSA-f4pf-pgp4-f2r3

GHSA-f526-rq4j-5ch8

https://github.com/advisories/GHSA-f526-rq4j-5ch8

GHSA-f554-v4xw-5j39

https://github.com/advisories/GHSA-f554-v4xw-5j39

GHSA-g4wg-67xq-8q53

https://github.com/advisories/GHSA-g4wg-67xq-8q53

GHSA-g8jw-gv54-r94p

https://github.com/advisories/GHSA-g8jw-gv54-r94p

GHSA-grvc-qhhp-7h6m

https://github.com/advisories/GHSA-grvc-qhhp-7h6m

GHSA-gvq8-v2fm-ffxv

https://github.com/advisories/GHSA-gvq8-v2fm-ffxv

GHSA-h44v-39x6-9xvg

https://github.com/advisories/GHSA-h44v-39x6-9xvg

GHSA-h7fx-22wv-4cg8

https://github.com/advisories/GHSA-h7fx-22wv-4cg8

GHSA-hxw3-57rq-3v4m

https://github.com/advisories/GHSA-hxw3-57rq-3v4m

GHSA-jgw9-wqvx-j495

https://github.com/advisories/GHSA-jgw9-wqvx-j495

GHSA-jhv5-m83m-hxhq

https://github.com/advisories/GHSA-jhv5-m83m-hxhq

GHSA-jhxw-3hj9-9hqh

https://github.com/advisories/GHSA-jhxw-3hj9-9hqh

GHSA-jp2r-gm4v-wvq2

https://github.com/advisories/GHSA-jp2r-gm4v-wvq2

GHSA-m7g5-gw57-cwcr

https://github.com/advisories/GHSA-m7g5-gw57-cwcr

GHSA-m998-cvfm-9444

https://github.com/advisories/GHSA-m998-cvfm-9444

GHSA-mqxv-c882-m8w9

https://github.com/advisories/GHSA-mqxv-c882-m8w9

GHSA-pg3f-chj4-mrw6

https://github.com/advisories/GHSA-pg3f-chj4-mrw6

GHSA-pjxv-5j98-cqx4

https://github.com/advisories/GHSA-pjxv-5j98-cqx4

GHSA-pvgq-84w2-93ph

https://github.com/advisories/GHSA-pvgq-84w2-93ph

GHSA-pw4j-ff39-9vjm

https://github.com/advisories/GHSA-pw4j-ff39-9vjm

GHSA-q56j-jjh6-38jf

https://github.com/advisories/GHSA-q56j-jjh6-38jf

GHSA-q6pp-28g8-xqjc

https://github.com/advisories/GHSA-q6pp-28g8-xqjc

GHSA-q9p9-j22r-577p

https://github.com/advisories/GHSA-q9p9-j22r-577p

GHSA-qjwp-c855-hc69

https://github.com/advisories/GHSA-qjwp-c855-hc69

GHSA-qpfh-m9w6-xf2x

https://github.com/advisories/GHSA-qpfh-m9w6-xf2x

GHSA-qq23-mqmv-pc65

https://github.com/advisories/GHSA-qq23-mqmv-pc65

GHSA-vqxm-9w7c-hvvx

https://github.com/advisories/GHSA-vqxm-9w7c-hvvx

GHSA-x7v7-9jp5-wqj2

https://github.com/advisories/GHSA-x7v7-9jp5-wqj2

GHSA-xf45-j844-588v

https://github.com/advisories/GHSA-xf45-j844-588v

GHSA-xm53-352c-57jw

https://github.com/advisories/GHSA-xm53-352c-57jw

GHSA-xq87-9rrm-6wqw

https://github.com/advisories/GHSA-xq87-9rrm-6wqw

Связанные уязвимости

CVE-2026-109240

CVSS3: 3.1

ubuntu

28 дней назад

FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBufferSize values. Attackers can send a TS_URB_ISOCH_TRANSFER IN-direction request with OutputBufferSize above INT32_MAX over URBDRC, triggering an assertion in libusb_udev_isoch_transfer that terminates the client.