Debian 11.1 Kernel Security Update UA-SEC-2023-0548

This update for freerdp fixes the following issues: * CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). * CVE-2026-22854: server-controlled read length is used to read file data into an IRP output can cause heap-buffer-overflow in drive_process_irp_read (bsc#1256720). * CVE-2026-22856: race condition in the serial channel IRP thread tracking can cause heap-use-after-free in create_irp_thread(bsc#1256722). * CVE-2026-22859: improper bound check can lead to heap-buffer-overflow in urb_select_configuration (bsc#1256725). * CVE-2026-23530: improper validation can lead to heap buffer overflow in `planar_decompress_plane_rle` (bsc#1256940). * CVE-2026-23531: improper validation in `clear_decompress` can lead to heap buffer overflow (bsc#1256941). * CVE-2026-23532: mismatch between destination rectangle clamping and the actual copy size can lead to a heap buffer overflow in

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-417=1 openSUSE-SLE-15.6-2026-417=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-417=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-417=1 openSUSE-SLE-15.6-2026-417=1

* SUSE Package Hub 15 15-SP7

zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-417=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * freerdp-server-2.11.2-150600.4.6.1 * libwinpr2-2-debuginfo-2.11.2-150600.4.6.1 * libfreerdp2-2-debuginfo-2.11.2-150600.4.6.1 * libwinpr2-2-2.11.2-150600.4.6.1 * libuwac0-0-debuginfo-2.11.2-150600.4.6.1 * uwac0-0-devel-2.11.2-150600.4.6.1 * winpr-devel-2.11.2-150600.4.6.1 * freerdp-devel-2.11.2-150600.4.6.1 * freerdp-proxy-debuginfo-2.11.2-150600.4.6.1 * freerdp-wayland-debuginfo-2.11.2-150600.4.6.1 * freerdp-2.11.2-150600.4.6.1 * freerdp-proxy-2.11.2-150600.4.6.1 * libfreerdp2-2-2.11.2-150600.4.6.1 * libuwac0-0-2.11.2-150600.4.6.1 * freerdp-debugsource-2.11.2-150600.4.6.1 * freerdp-wayland-2.11.2-150600.4.6.1 * freerdp-server-debuginfo-2.11.2-150600.4.6.1 * freerdp-debuginfo-2.11.2-150600.4.6.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * freerdp-debugsource-2.11.2-150600.4.6.1 * uwac0-0-devel-2.11.2-150600.4.6.1 * Read the Full Advisory

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)

* freerdp-server-2.11.2-150600.4.6.1

* libwinpr2-2-debuginfo-2.11.2-150600.4.6.1

* libfreerdp2-2-debuginfo-2.11.2-150600.4.6.1

* libwinpr2-2-2.11.2-150600.4.6.1

* libuwac0-0-debuginfo-2.11.2-150600.4.6.1

* uwac0-0-devel-2.11.2-150600.4.6.1

* winpr-devel-2.11.2-150600.4.6.1

* freerdp-devel-2.11.2-150600.4.6.1

* freerdp-proxy-debuginfo-2.11.2-150600.4.6.1

* freerdp-wayland-debuginfo-2.11.2-150600.4.6.1

* freerdp-2.11.2-150600.4.6.1

* freerdp-proxy-2.11.2-150600.4.6.1

* libfreerdp2-2-2.11.2-150600.4.6.1

* libuwac0-0-2.11.2-150600.4.6.1

* freerdp-debugsource-2.11.2-150600.4.6.1

* freerdp-wayland-2.11.2-150600.4.6.1

* freerdp-server-debuginfo-2.11.2-150600.4.6.1

* freerdp-debuginfo-2.11.2-150600.4.6.1

* SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x)

* freerdp-debugsource-2.11.2-150600.4.6.1

* uwac0-0-devel-2.11.2-150600.4.6.1

* bsc#1256718 * bsc#1256720 * bsc#1256722 * bsc#1256725 * bsc#1256940 * bsc#1256941 * bsc#1256942 * bsc#1256944 ## References: * * * * * * * * * * * * * * * * Read the Full Advisory

*

*

*

*

*

*

*

*

*

*

*

*

*

*

*