openSUSE Leap 15.6 freerdp Important Fix Denial of Service 2026-1632

This update for freerdp fixes the following issues: * CVE-2026-25941: Out-of-Bounds Read in client RDPGFX channel via crafted `WIRE_TO_SURFACE_2` PDU (bsc#1258919). * CVE-2026-25942: Global-buffer-overflow in `xf_rail_server_execute_result` (bsc#1258920). * CVE-2026-25952: Heap-use-after-free in `xf_SetWindowMinMaxInfo` (bsc#1258921). * CVE-2026-25953: Heap-use-after-free in `xf_AppUpdateWindowFromSurface` (bsc#1258923). * CVE-2026-25954: Heap-use-after-free in `xf_rail_server_local_move_size` (bsc#1258924). * CVE-2026-25997: Heap-use-after-free in `xf_clipboard_format_equal` (bsc#1258977). * CVE-2026-26986: Heap-use-after-free in `rail_window_free` (bsc#1258967). * CVE-2026-27015: Smartcard NDR alignment padding triggers reachable `WINPR_ASSERT` abort (bsc#1258987). * CVE-2026-27951: Denial of service via endless blocking loop in `Stream_EnsureCapacity` (bsc#1258939). * CVE-2026-29774: Missing bounds validation can cause a

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1632=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1632=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-1632=1

* SUSE Package Hub 15 15-SP7

zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1632=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * freerdp-debuginfo-2.11.2-150600.4.26.1 * freerdp-server-debuginfo-2.11.2-150600.4.26.1 * libfreerdp2-2-2.11.2-150600.4.26.1 * freerdp-debugsource-2.11.2-150600.4.26.1 * libwinpr2-2-debuginfo-2.11.2-150600.4.26.1 * freerdp-server-2.11.2-150600.4.26.1 * freerdp-2.11.2-150600.4.26.1 * freerdp-proxy-debuginfo-2.11.2-150600.4.26.1 * libuwac0-0-2.11.2-150600.4.26.1 * libuwac0-0-debuginfo-2.11.2-150600.4.26.1 * winpr-devel-2.11.2-150600.4.26.1 * freerdp-devel-2.11.2-150600.4.26.1 * freerdp-wayland-debuginfo-2.11.2-150600.4.26.1 * libwinpr2-2-2.11.2-150600.4.26.1 * freerdp-wayland-2.11.2-150600.4.26.1 * freerdp-proxy-2.11.2-150600.4.26.1 * libfreerdp2-2-debuginfo-2.11.2-150600.4.26.1 * uwac0-0-devel-2.11.2-150600.4.26.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * freerdp-debuginfo-2.11.2-150600.4.26.1 * Read the Full Advisory

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)

* freerdp-debuginfo-2.11.2-150600.4.26.1

* freerdp-server-debuginfo-2.11.2-150600.4.26.1

* libfreerdp2-2-2.11.2-150600.4.26.1

* freerdp-debugsource-2.11.2-150600.4.26.1

* libwinpr2-2-debuginfo-2.11.2-150600.4.26.1

* freerdp-server-2.11.2-150600.4.26.1

* freerdp-2.11.2-150600.4.26.1

* freerdp-proxy-debuginfo-2.11.2-150600.4.26.1

* libuwac0-0-2.11.2-150600.4.26.1

* libuwac0-0-debuginfo-2.11.2-150600.4.26.1

* winpr-devel-2.11.2-150600.4.26.1

* freerdp-devel-2.11.2-150600.4.26.1

* freerdp-wayland-debuginfo-2.11.2-150600.4.26.1

* libwinpr2-2-2.11.2-150600.4.26.1

* freerdp-wayland-2.11.2-150600.4.26.1

* freerdp-proxy-2.11.2-150600.4.26.1

* libfreerdp2-2-debuginfo-2.11.2-150600.4.26.1

* uwac0-0-devel-2.11.2-150600.4.26.1

* SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x)

* freerdp-debuginfo-2.11.2-150600.4.26.1

* bsc#1258919 * bsc#1258920 * bsc#1258921 * bsc#1258923 * bsc#1258924 * bsc#1258939 * bsc#1258967 * bsc#1258977 * bsc#1258987 * bsc#1259680 * bsc#1259684 * bsc#1259689 * bsc#1259692 * bsc#1259693 * bsc#1261848 ## References: * * * * * * * * * * * * * * Read the Full Advisory

*

*

*

*

*

*

*

*

*

*

*

*

*