- Rebase onto vendor freerdp-2.11.7-1.amzn2.0.19, which fixes CVE-2026-109241, CVE-2026-109948, CVE-2026-109953, CVE-2026-110829, CVE-2026-110832, CVE-2026-110836 and CVE-2026-110837 - CVE-2026-121392: TLS certificate CN fallback and IP SAN validation; keep only the IP SAN matching that the vendor's patch does not cover - CVE-2026-121950: integer overflow in GFX surface allocation - CVE-2026-121953: use-after-free on duplicate dynamic channel connection; keep the parts the vendor's patches do not cover - CVE-2026-121954: planar codec state corruption on failed reset - CVE-2026-121959: infinite loop in RD Gateway websocket read - CVE-2026-121964: heap overflow in rpc_client_recv_fragment, now fixed by the vendor; the TuxCare duplicate is dropped - Drop the TuxCare patches for six earlier fixes that the vendor now carries - Renumber the TuxCare patches to 1122-1135; the vendor now declares up to Patch1121