This update for freerdp fixes the following issues: Update to version 3.24.2. Security issues fixed: - CVE-2026-25941: out-of-bounds read in the FreeRDP client RDPGFX channel (bsc#1258919). - CVE-2026-25942: buffer overflow of global array in `xf_rail_server_execute_result` (bsc#1258920). - CVE-2026-25952: heap use-after-free in `xf_SetWindowMinMaxInfo` (bsc#1258921). - CVE-2026-25953: heap use-after-free in `xf_AppUpdateWindowFromSurface` (bsc#1258923). - CVE-2026-25954: heap use-after-free in `xf_rail_server_local_move_size` (bsc#1258924). - CVE-2026-25955: heap use-after-free in `xf_AppUpdateWindowFromSurface` (bsc#1258973). - CVE-2026-25959: heap use-after-free in `xf_cliprdr_provide_data_` (bsc#1258976). - CVE-2026-25997: heap use-after-free in `xf_clipboard_format_equal` (bsc#1258977). - CVE-2026-26271: buffer overread in FreeRDP icon processing (bsc#1258979). - CVE-2026-26955: out-of-bounds write in FreeRDP clients using the GDI surface pipeline (bsc#1258982). - CVE-2026-26965: out-of-bounds write in FreeRDP client RLE planar decode path (bsc#1258985). - CVE-2026-29774: heap buffer overflow in the FreeRDP client's AVC420/AVC444 YUV-to-RGB conversion path (bsc#1259689). - CVE-2026-29775: out-of-bounds access in the FreeRDP client bitmap cache subsystem (bsc#1259684). - CVE-2026-29776: integer underflow in `update_read_cache_bitmap_order` (bsc#1259692). - CVE-2026-31806: heap buffer overflow in `nsc_process_message` (bsc#1259653). - CVE-2026-31883: heap buffer overwrite due to a `size_t` underflow in the IMA-ADPCM and MS-ADPCM audio decoders (bsc#1259679). - CVE-2026-31884: division by zero in MS-ADPCM and IMA-ADPCM decoders (bsc#1259680). - CVE-2026-31885: out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders (bsc#1259686). - CVE-2026-31897: out-of-bounds read in `freerdp_bitmap_decompress_planar` (bsc#1259693). - CVE-2026-33952: client-side crash due to `WINPR_ASSERT()` failure in `rts_read_auth_verifier_no_checks()` (bsc#1261196). - CVE-2026-33977: client-side crash due to `WINPR_ASSERT()` failure in IMA ADPCM audio decoder (bsc#1261198). - CVE-2026-33982: heap buffer overread in in `winpr_aligned_offset_recalloc` (bsc#1261222). - CVE-2026-33983: undefined behavior and resource exhaustion via 80 billion iteration loop in `progressive_decompress_tile_upgrade` (bsc#1261200). - CVE-2026-33984: heap buffer overflow in ClearCodec `resize_vbar_entry` (bsc#1261211). - CVE-2026-33985: heap out-of-bounds read in `clear_decompress_glyph_data` (bsc#1261217). - CVE-2026-33986: heap out-of-bounds write due to H.264 YUV buffer dimension desync (bsc#1261223). - CVE-2026-33987: heap out-of-bounds write due to persistent cache bmpSize desync (bsc#1261226). - CVE-2026-33995: double-free vulnerability in `kerberos_AcceptSecurityContext` and `kerberos_InitializeSecurityContextA` (bsc#1261227). Other updates and bugfixes: - Version 3.24.2: * [channels,video] fix wrong cast (#12511) * [codec,openh264] reject encoder ABI mismatch on runtime-loaded library (#12510) * [client,sdl] create a copy of rdpPointer (#12512) * [codec,video] properly pass intermediate format (#12518) * [utils, signal] lazily initialize Windows CRITICAL_SECTION to match POSIX static mutex behavior (#12520) winpr: improve libunwind backtraces (#12530) * [server,shadow] remember selected caps (#12528) * Zero credential data before free in NLA and NTLM context (#12532) * [server,proxy] ignore missing client in input channel (#12536) * [server,proxy] ignore rdpdr messages (#12537) * [winpr,sspi] improve kerberos logging (#12538) * Codec fixes (#12542) - Version 3.24.1: * [warnings] fix various sign and cast warnings (#12480) * [client,x11] start with xfc->remote_app = TRUE; (#12491) * Sam file read regression fix (#12484) * [ncrypt,smartcardlogon] support ECC keys in PKCS#11 smartcard enumeration (#12490) * Fix: memory leak in rdp_client_establish_keys() (#12494) * Fix memory leak in freerdp_settings_int_buffer_copy() on error paths (libfreerdp/core/settings.c) (#12486) * Code Cleanups (#12493) * Fix: memory leak in PCSC_SCardListReadersW() (#12495) * [channels,telemetry] use dynamic logging (#12496) * [channel,gfx] use generic plugin log (@12498, #12499) * [channels,audin] set error when audio_format_read fails (#12500) * [channels,video] unify error handling (#12502) * Fastpath fine grained lock (#12503) * [core,update] make the PlaySound callback non-mandatory (#12504) * Refinements: RPM build updates, FIPS improvements (#12506) - Version 3.24.0: * Completed the [[nodiscard]] marking of the API to warn about problematic * unchecked use of functions * Added full C23 support (default stays at C11) to allow new compilers * to do stricter checking * Improved X11 and SDL3 clients * Improved smartcard support * proxy now supports RFX graphics mode * Attribute nodiscard related chanes (#12325, #12360, #12395, #12406, #12421, #12426, #12177, #12403, #12405, #12407, #124