SUSE-SU-2026:1217-1

Details

This update for freerdp fixes the following issue:

CVE-2026-24684: Heap-use-after-free in play_thread (bsc#1257991).

Affected Packages

freerdp

SUSE Linux Enterprise Module for Package Hub 15 SP7openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

uwac0-0-devel

SUSE Linux Enterprise Module for Package Hub 15 SP7openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

freerdp-devel

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

freerdp-proxy

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

freerdp-server

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

freerdp-wayland

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

libfreerdp2-2

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

libuwac0-0

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

libwinpr2-2

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

winpr-devel

openSUSE Leap 15.6

Fixed in:

2.11.2-150600.4.21.1

References

REPORT

https://bugzilla.suse.com/1257991

WEB

https://www.suse.com/security/cve/CVE-2026-24684

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20261217-1/