{"id":"CLSA-2026-1791553435","summary":"freerdp: Fix of 4 CVEs","details":"- CVE-2026-68580: reject a FramesPerPacket of INT32_MAX or more in audin_process_open() before it is stored, so a malicious server cannot overflow the per-packet size arithmetic in the audio input backends\n- CVE-2026-66402: return the real length of certificate ASN.1 strings and reject values that are not a host name or IP, so a certificate carrying an embedded NUL can no longer pass identity validation as a shorter, different name\n- CVE-2026-67300: deep-clone WINDOW_STATE_ORDER and NOTIFY_ICON_STATE_ORDER before posting them to the async update queue, and free the clone in the message destructor; the shallow copies referenced parser-owned heap released as soon as the callback returned\n- CVE-2026-67289: validate the server-supplied redirection fields - addresses must parse as IPv4/IPv6, FQDN and NetBIOS name must look like a host, username and domain must not contain line breaks - so CRLF in TargetNetAddress can no longer be injected into the HTTP proxy CONNECT request","modified":"2026-10-26T09:43:35.626505259Z","published":"2026-10-09T13:44:08Z","upstream":["CVE-2026-66402","CVE-2026-67289","CVE-2026-67300","CVE-2026-68580"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1791553435.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66402"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67289"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67300"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68580"}],"affected":[{"package":{"name":"freerdp","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/freerdp?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.0.9.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791553435.json"}},{"package":{"name":"freerdp-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/freerdp-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.0.9.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791553435.json"}},{"package":{"name":"freerdp-libs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/freerdp-libs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.0.9.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791553435.json"}},{"package":{"name":"libwinpr","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libwinpr?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.0.9.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791553435.json"}},{"package":{"name":"libwinpr-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/libwinpr-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-5.0.9.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791553435.json"}}],"schema_version":"1.9.0"}