freerdp security update

2:3.10.3-12.10 - Backport several CVE fixes CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241 Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534...

CVE-2026-67297

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...