FreeRDP is a free implementation of the Remote Desktop Protocol , released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix: * freerdp: clients using `/parallel` command line switch might read uninitialized data * freerdp: clients using the `/video` command line switch might read uninitialized data * freerdp: out of bounds read in zgfx decoder * freerdp: undefined behaviour in zgfx decoder * freerdp: division by zero in urbdrc channel * freerdp: missing length validation in urbdrc channel * freerdp: heap buffer overflow in urbdrc channel * freerdp: missing path sanitation with `drive` channel * freerdp: missing input length validation in `drive` channel For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.