REDHAT-BUG-2510010: Medium severity FreeRDP freerdp vulnerability

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in updateprocessglyphfragments()/glyphcachefragmentput() in libfreerdp/cache/glyph.c. When handling a GLYPHFRAGMENTADD update, the code reads a one-byte server-controlled declared fragment size but does not verify it fits within the remaining received buffer before allocating and copying that many bytes. A malicious RDP server can send a short fragment with an oversized declared size, causing the client to read beyond the allocated buffer, resulting in an out-of-bounds read and client crash.