File _patchinfo of Package patchinfo.43418

<patchinfo incident="43418">
  <!--generated with prepare-update from request 404574-->
  <issue tracker="bnc" id="1258979">VUL-0: CVE-2026-26271: freerdp,freerdp2: Buffer Overread in FreeRDP Icon Processing</issue>
  <issue tracker="bnc" id="1258982">VUL-0: CVE-2026-26955: freerdp,freerdp2: Out-of-bounds Write in freerdp</issue>
  <issue tracker="bnc" id="1258985">VUL-0: CVE-2026-26965: freerdp,freerdp2: Out-of-bounds Write in freerdp</issue>
  <issue tracker="bnc" id="1259653">VUL-0: CVE-2026-31806: freerdp,freerdp2: improper validation of server messages can lead to a heap buffer overflow and arbitrary code execution</issue>
  <issue tracker="bnc" id="1259679">VUL-0: CVE-2026-31883: freerdp,freerdp2: freerdp: crafted RDPSND audio format and wave data can cause a heap buffer overflow write</issue>
  <issue tracker="bnc" id="1259686">VUL-0: CVE-2026-31885: freerdp,freerdp2: freerdp: unchecked predictor  can lead to an out-of-bounds read</issue>
  <issue tracker="cve" id="2026-26271"/>
  <issue tracker="cve" id="2026-26955"/>
  <issue tracker="cve" id="2026-26965"/>
  <issue tracker="cve" id="2026-31806"/>
  <issue tracker="cve" id="2026-31883"/>
  <issue tracker="cve" id="2026-31885"/>
  <category>security</category>
  <rating>important</rating>
  <packager>yfjiang</packager>
  <summary>Security update for freerdp</summary>
  <description>This update for freerdp fixes the following issues:

- CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing (bsc#1258979).
- CVE-2026-26955: Out-of-bounds Write in freerdp (bsc#1258982).
- CVE-2026-26965: Out-of-bounds Write in freerdp (bsc#1258985).
- CVE-2026-31806: improper validation of server messages can lead to a heap buffer overflow and arbitrary code execution
  (bsc#1259653).
- CVE-2026-31883: crafted RDPSND audio format and wave data can cause a heap buffer overflow write (bsc#1259679).
- CVE-2026-31885: unchecked predictor can lead to an out-of-bounds read (bsc#1259686).
</description>
</patchinfo>
openSUSE Build Service is sponsored by