rpms/freerdp
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import Oracle_OSS freerdp-2.11.7-7.el9_8.4

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-07-10 18:55:30 -04:00
parent af3896eb0d
commit c2f288df78
2 changed files with 40 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
SOURCES/codec-planar-fix-bounds-checks.patch Normal file
View File

@ -0,0 +1,31 @@
From 4b93945cf5f9b85d17705d038955ee59c4b669a0 Mon Sep 17 00:00:00 2001
From: Armin Novak <armin.novak@thincast.com>
Date: Thu, 30 Apr 2026 15:03:21 +0200
Subject: [PATCH] [codec,planar] fix bounds checks
---
libfreerdp/codec/planar.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/libfreerdp/codec/planar.c b/libfreerdp/codec/planar.c
index 9b4d13057..67fc4212e 100644
--- a/libfreerdp/codec/planar.c
+++ b/libfreerdp/codec/planar.c
@@ -841,12 +841,12 @@ BOOL planar_decompress(BITMAP_PLANAR_CONTEXT* planar, const BYTE* pSrcData, UINT
return FALSE;
}
- if ((nXDst + nSrcWidth) * bpp > nDstStep)
+ if ((nXDst + nSrcWidth) * bpp > nTempStep)
{
WLog_ERR(TAG,
"planar plane destination (X %" PRIu32 " + width %" PRIu32
") * bpp %" PRIu32 " exceeds stride %" PRIu32,
- nXDst, nSrcWidth, bpp, nDstStep);
+ nXDst, nSrcWidth, bpp, nTempStep);
return FALSE;
}
--
2.52.0

10
SPECS/freerdp.spec
View File

@ -27,7 +27,7 @@
Name: freerdp Name: freerdp
Version: 2.11.7 Version: 2.11.7
Release: 7%{?dist}.3 Release: 7%{?dist}.4
Epoch: 2 Epoch: 2
Summary: Free implementation of the Remote Desktop Protocol (RDP) Summary: Free implementation of the Remote Desktop Protocol (RDP)
License: ASL 2.0 License: ASL 2.0
@ -194,6 +194,10 @@ Patch: client-x11-improve-rails-window-locking.patch
Patch: client-x11-refactor-locking.patch Patch: client-x11-refactor-locking.patch
Patch: client-x11-fix-deadlock-on-output-expose.patch Patch: client-x11-fix-deadlock-on-output-expose.patch
# CVE-2026-45700
# https://github.com/FreeRDP/FreeRDP/commit/4a065a941ae134a0433d1497c03b3c3eb91b9f85
Patch: codec-planar-fix-bounds-checks.patch
BuildRequires: gcc BuildRequires: gcc
BuildRequires: gcc-c++ BuildRequires: gcc-c++
BuildRequires: alsa-lib-devel BuildRequires: alsa-lib-devel
@ -451,6 +455,10 @@ find %{buildroot} -name "*.a" -delete
%{_libdir}/pkgconfig/winpr-tools2.pc %{_libdir}/pkgconfig/winpr-tools2.pc
%changelog %changelog
* Wed Jun 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2:2.11.7-7.4
- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
Resolves: RHEL-186991
* Tue May 05 2026 Ondrej Holy <oholy@redhat.com> - 2:2.11.7-7.3 * Tue May 05 2026 Ondrej Holy <oholy@redhat.com> - 2:2.11.7-7.3
- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
Resolves: RHEL-159860 Resolves: RHEL-159860