mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-27 12:40:19 +00:00
Code Issues Projects Releases Wiki Activity

freerdp3: patch CVE-2026-55648

Browse Source 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55648

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-09-15 10:13:45 +05:30
committed by Anuj Mittal
parent 631ca42559
commit d6868b566a
2 changed files with 29 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-55648.patch
+28
View File
@@ -0,0 +1,28 @@
From dbe40963a661a501a227169690c0b3f413514b07 Mon Sep 17 00:00:00 2001
From: Armin Novak <armin.novak@thincast.com>
Date: Sat, 13 Jun 2026 12:14:26 +0200
Subject: [PATCH] [codec,color] fix source bounds checks
(cherry picked from commit e4ae473da2926724d9b6329778797a3bdea79eb3)
CVE: CVE-2026-55648
Upstream-Status: Backport [https://github.com/FreeRDP/FreeRDP/commit/e4ae473da2926724d9b6329778797a3bdea79eb3]
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
libfreerdp/codec/color.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libfreerdp/codec/color.c b/libfreerdp/codec/color.c
index 5271cf939..47ef77ab0 100644
--- a/libfreerdp/codec/color.c
+++ b/libfreerdp/codec/color.c
@@ -451,7 +451,7 @@ BOOL freerdp_image_copy_from_icon_data(BYTE* WINPR_RESTRICT pDstData, UINT32 Dst
}
/* Ensure we have enough source data bytes for image copy. */
- if (cbBitsColor < nWidth * nHeight * FreeRDPGetBytesPerPixel(format))
+ if (cbBitsColor / nHeight < FreeRDPGetBytesPerPixel(format) * nWidth)
{
WLog_ERR(TAG,
"cbBitsColor{%" PRIu32 "} < nWidth{%" PRIu32 "} * nHeight{%" PRIu32
meta-oe/recipes-support/freerdp/freerdp3_3.24.2.bb
+1
View File
@@ -18,6 +18,7 @@ SRC_URI = "git://github.com/FreeRDP/FreeRDP.git;nobranch=1;protocol=https;tag=${
file://CVE-2026-55193.patch \
file://CVE-2026-55194.patch \
file://CVE-2026-55564.patch \
file://CVE-2026-55648.patch \
"