Release date:
2026-09-22 14:14:35 UTC
Description:
- CVE-2026-67300: complete the fix, deep-clone NOTIFY_ICON_STATE_ORDER in the
async update proxy; the vendor's patch covers only the WINDOW_STATE_ORDER half
- CVE-2026-91956: out-of-bounds read in func_get_ep_desc()
- CVE-2026-91957: use-after-free in the smartcard RDPDR device when worker
thread creation fails after device registration
- CVE-2026-91959: buffer over-read in rts_read_result()
- CVE-2026-91963: uninitialized heap disclosure, Stream_New() now uses calloc
Updated packages:
-
freerdp-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm
sha:b6069ebf28d20bef956f2e704d2f23d6575d962a5975b5423722a61ddb7890d3
-
freerdp-devel-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm
sha:5bc638d09f6bd75f782adc34ab1e2871a5d2be4ca2007f33469d474ca3ac304a
-
freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els3.i686.rpm
sha:e3552340d50379c395ed0db2982d7078a6a79c596e39b9b7bbf614311cc40563
-
freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm
sha:ba79b8edd264d2873654acdfe129b0c778e67ad21c3869aa2c2ae9bcd6827c65
-
libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els3.i686.rpm
sha:1e94c8e0c60614ca21807df757f5f56ea44361624af54e591f61e29bed403b72
-
libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm
sha:273b542817ee5f4f58c917fb403948c9fab5e2576c6fd3e3c289adf19a4950f1
-
libwinpr-devel-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm
sha:418a2fe512c1c863c74847da8e24d5838a7996e9164ad9149684af90863fda42
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
