freerdp-2.11.7-10.el8_10
エラータID: AXSA:2026-1270:23
リリース日:
2026/07/16 Thursday - 16:33
題名:
freerdp-2.11.7-10.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- FreeRDP の planar bitmap デコーダーには、メモリ領域の範囲外
書き込みの問題があるため、リモートの攻撃者により、情報の漏洩、
データ破壊、およびサービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2026-45700)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
追加情報:
N/A
ダウンロード:
SRPMS
- freerdp-2.11.7-10.el8_10.src.rpm
MD5: 0ceabb9b92a0b056b247a4b26abeb0d3
SHA-256: 9fe42ea2d4e27b2d01032b3fdef11833adea9f478ffb5893c1d7f31470780a45
Size: 7.04 MB
Asianux Server 8 for x86_64
- freerdp-2.11.7-10.el8_10.x86_64.rpm
MD5: 7faf024790d87665bd1c821e3afd63b9
SHA-256: 95b4e688839e157a74179a0bb94df4944df9440b4f230c6d3aafd64680bbd7bc
Size: 120.12 kB - freerdp-devel-2.11.7-10.el8_10.i686.rpm
MD5: 10e8179dcf4fd6141d039ead4e20a744
SHA-256: 9c60ef43a43dff8ccb9386bec3fdc6b202718dbdd9ec946699d9a452d0e184d9
Size: 148.31 kB - freerdp-devel-2.11.7-10.el8_10.x86_64.rpm
MD5: 238e459b1cc46adba7d24475c34f79ba
SHA-256: 90101706d3d5c2eec3280ace35e7bf214b1b14fe54dd02989c3f90693dfcf800
Size: 148.34 kB - freerdp-libs-2.11.7-10.el8_10.i686.rpm
MD5: 76aea1db878f48eabc19884483b3b0ee
SHA-256: 7e023c9594b6719144b5e06af323f98e69c9389a8b6909a3f5f478490f076194
Size: 878.76 kB - freerdp-libs-2.11.7-10.el8_10.x86_64.rpm
MD5: 4c34745fd014d345bfa2b54f31ff734e
SHA-256: 7543cc2cb96986ae217a9fe48ea56aab0babf475cee97b9e8a89f07fcce40a0e
Size: 930.49 kB - libwinpr-2.11.7-10.el8_10.i686.rpm
MD5: a3575803f43c72f974307c08093dcca4
SHA-256: 9172e22735fb25d0608f1ac09e615845f34d7bc809d52019a2cdd5efcb2548cd
Size: 363.74 kB - libwinpr-2.11.7-10.el8_10.x86_64.rpm
MD5: 043d72f69472460c7ecc2d9c3fe814aa
SHA-256: de48e5c51e6ce51b8d5d97a847a5f93bcf0c653ca52fc8d416c767c5e418a62d
Size: 380.03 kB - libwinpr-devel-2.11.7-10.el8_10.i686.rpm
MD5: ad91c4bbd5f5602742f6c031bfff04d9
SHA-256: 9a088ea49cfe3f3af74c8b3a91f2064ed8f31a8763de2d785c122a5369418a7a
Size: 176.45 kB - libwinpr-devel-2.11.7-10.el8_10.x86_64.rpm
MD5: b41fb2459a1357bc77c7ecf9668b0e3f
SHA-256: ebb594a4a0832983a3efba386ad706667e1d91258d3c6b65cb13b4cfc67adeec
Size: 176.44 kB