File _patchinfo of Package patchinfo.42881
<patchinfo incident="42881"> <!--generated with prepare-update from request 402186--> <issue tracker="bnc" id="1256721">VUL-0: CVE-2026-22855: freerdp,freerdp2: Heap-buffer-overflow in smartcard_unpack_set_attrib_call</issue> <issue tracker="bnc" id="1256723">VUL-0: CVE-2026-22857: freerdp,freerdp2: Heap-use-after-free in irp_thread_func</issue> <issue tracker="bnc" id="1256943">VUL-0: CVE-2026-23533: freerdp,freerdp2: improper validation can lead to heap buffer overflow in `clear_decompress_residual_data`</issue> <issue tracker="bnc" id="1256945">VUL-0: CVE-2026-23732: freerdp,freerdp2: improper validation can lead to heap buffer overflow in `Glyph_Alloc`</issue> <issue tracker="bnc" id="1256946">VUL-0: CVE-2026-23883: freerdp,freerdp2: use-after-free when `update_pointer_color` and `freerdp_image_copy_from_pointer_data` fail</issue> <issue tracker="bnc" id="1256947">VUL-0: CVE-2026-23884: freerdp,freerdp2: use-after-free in `gdi_set_bounds`</issue> <issue tracker="cve" id="2026-22855"/> <issue tracker="cve" id="2026-22857"/> <issue tracker="cve" id="2026-23533"/> <issue tracker="cve" id="2026-23732"/> <issue tracker="cve" id="2026-23883"/> <issue tracker="cve" id="2026-23884"/> <category>security</category> <rating>important</rating> <packager>yfjiang</packager> <summary>Security update for freerdp</summary> <description>This update for freerdp fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723). - CVE-2026-23533: improper validation can lead to heap buffer overflow in `clear_decompress_residual_data` (bsc#1256943). - CVE-2026-23732: improper validation can lead to heap buffer overflow in `Glyph_Alloc` (bsc#1256945). - CVE-2026-23883: use-after-free when `update_pointer_color` and `freerdp_image_copy_from_pointer_data` fail (bsc#1256946). - CVE-2026-23884: use-after-free in `gdi_set_bounds` (bsc#1256947). </description> </patchinfo>