RHSA-2024:9092: Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.<br>Security Fix(es):<br><li> freerdp: Integer Overflow leading to Heap Overflow in freerdpbitmapplanarcontextreset (CVE-2024-22211)</li> <li> freerdp: out-of-bounds read in ncrushdecompress (CVE-2024-32459)</li> <li> freerdp: OutOfBound Read in interleaveddecompress (CVE-2024-32460)</li> <li> freerdp: Integer overflow &amp; OutOfBound Write in cleardecompressresidualdata (CVE-2024-32039)</li> <li> freerdp: integer underflow in nscrledecode (CVE-2024-32040)</li> <li> freerdp: OutOfBound Read in zgfxdecompresssegment (CVE-2024-32041)</li> <li> freerdp: OutOfBound Read in planarskipplanerle (CVE-2024-32458)</li> <li> freerdp: out-of-bounds read (CVE-2024-32662)</li> <li> FreeRDP: ExtractRunLengthRegular out of bound read (CVE-2024-32658)</li> <li> freerdp: zgfxdecompress out of memory (CVE-2024-32660)</li> <li> freerdp: freerdpimagecopy out of bound read (CVE-2024-32659)</li> <li> freerdp: rdpwritelogoninfov1 NULL access (CVE-2024-32661)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.