Описание
ELSA-2026-16014: freerdp security update (MODERATE)
[2:3.10.3-5.8]
- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159803, RHEL-159659, RHEL-161033, RHEL-161468 Resolves: RHEL-161504, RHEL-161071, RHEL-163653, RHEL-167791, RHEL-162930
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
freerdp
3.10.3-5.el10_1.8
freerdp-devel
3.10.3-5.el10_1.8
freerdp-libs
3.10.3-5.el10_1.8
freerdp-server
3.10.3-5.el10_1.8
libwinpr
3.10.3-5.el10_1.8
libwinpr-devel
3.10.3-5.el10_1.8
Oracle Linux x86_64
freerdp
3.10.3-5.el10_1.8
freerdp-devel
3.10.3-5.el10_1.8
freerdp-libs
3.10.3-5.el10_1.8
freerdp-server
3.10.3-5.el10_1.8
libwinpr
3.10.3-5.el10_1.8
libwinpr-devel
3.10.3-5.el10_1.8