freerdp security update

2:3.10.3-12.10 - Backport several CVE fixes CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241 Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534...

CVE-2026-67301

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oibcxlk2g...

DEBIAN-CVE-2026-67301

FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enabled e.g., xfreerdp /async-update, updatemessagePolygonSC and updatemessagePolygonCB allocate a fresh points array but...

CVE-2026-67301 FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy

FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enabled e.g., xfreerdp /async-update, updatemessagePolygonSC and updatemessagePolygonCB allocate a fresh points array but...