[ol10_appstream] freerdp-2:3.10.3-12.el10_2.6.aarch64

Name:	freerdp
Epoch:	2
Version:	3.10.3
Release:	12.el10_2.6
Architecture:	aarch64
Group:	Unspecified
Size:	1012848
License:	Apache-2.0 AND HPND AND LGPL-2.1-or-later AND LicenseRef-Fedora-Public-Domain AND OFL-1.1
RPM:	freerdp-3.10.3-12.el10_2.6.aarch64.rpm
Source RPM:	freerdp-3.10.3-12.el10_2.6.src.rpm
Build Date:	Tue Jul 07 2026
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	http://www.freerdp.com/
Summary:	Free implementation of the Remote Desktop Protocol (RDP)
Description:	The xfreerdp & wlfreerdp Remote Desktop Protocol (RDP) clients from the FreeRDP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox.

Changelog (Show File list) (Show related packages)

Mon Jun 29 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.6

- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093

Tue May 05 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.5

- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848

Wed Apr 29 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.4

- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931

Fri Apr 10 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.2

- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963

Thu Apr 09 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.1
```
- Rebuilt for errata
  Resolves: RHEL-155980
```

Tue Mar 31 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12

- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980

Fri Mar 27 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-11

- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980

Wed Mar 25 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-10

- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203

Tue Feb 17 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-9

- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894

Tue Jan 27 2026 Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8

- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318