[ALSA-2026:36203] Important: freerdp security update
Type:
security
Severity:
important
Release date:
2026-07-21
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface (CVE-2026-40033) * freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser (CVE-2026-44422) * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700) * freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs (CVE-2026-44421) * freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow (CVE-2026-44420) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 freerdp-devel-3.10.3-12.el10_2.6.aarch64.rpm 07b4345a1869d0fcd8cf4118552822624fdfb7defd6252fe5ca1535419b05ec3
aarch64 freerdp-server-3.10.3-12.el10_2.6.aarch64.rpm 2adfd4ce9811c5662e0e556a18d6977cb6987f4c0cbd433b7b4ba9db5417c455
aarch64 freerdp-3.10.3-12.el10_2.6.aarch64.rpm 325ae44d46691946f0ca08826291f64ad0302283829a69511aa484aa90071e3b
aarch64 libwinpr-3.10.3-12.el10_2.6.aarch64.rpm 45daf50e53aa858f7d95bfeb26c947eca56b2889b07af4be5a118cd6c6a75219
aarch64 freerdp-libs-3.10.3-12.el10_2.6.aarch64.rpm 9064db4548d23609e70655eefe1141379a5edcb10d69bd66590615c386f705ec
aarch64 libwinpr-devel-3.10.3-12.el10_2.6.aarch64.rpm ef7bc8602ff5ce507a042c968f0ccf66b9660c614e83a65a5106eb6ad10808e2
ppc64le freerdp-devel-3.10.3-12.el10_2.6.ppc64le.rpm 3c2aa2e492ef41b9e4afc007d5a9886c9b18a5542e084c27c262f90a1bb3657b
ppc64le freerdp-3.10.3-12.el10_2.6.ppc64le.rpm 45bb751f9d2435b53cbbd65f8f4605d683388709a43c744b13e0322699f9d100
ppc64le libwinpr-3.10.3-12.el10_2.6.ppc64le.rpm 5de781494aec06a7d1558d7406b6d80fc22a666aed902f7532c9de483195b73f
ppc64le freerdp-server-3.10.3-12.el10_2.6.ppc64le.rpm 669c1e7035771a38fff814df947a25de19183505abaad31efbcc3b8f810a26f0
ppc64le libwinpr-devel-3.10.3-12.el10_2.6.ppc64le.rpm 6b7b221e6286a085250e4f95e729f84dd3db5869785ae913a373d34bb8d5511f
ppc64le freerdp-libs-3.10.3-12.el10_2.6.ppc64le.rpm b231e73bd36e7ed8d3018cc4b8f02b2585257e2492630d80a310e833d88f68c4
s390x freerdp-libs-3.10.3-12.el10_2.6.s390x.rpm 264c640bb60f3f9788f7163aeb48da02ca7233bd6e4fa17d3a6335d206a3db88
s390x freerdp-devel-3.10.3-12.el10_2.6.s390x.rpm 3fa3f935974884d7c27cf12bc9a52816d6bcd54652a2b9f001613449c87f0fbe
s390x libwinpr-3.10.3-12.el10_2.6.s390x.rpm 65264754bea4f9c7da58b771569338f3b9aa23a6ec88945818caf9c1cf41dbc5
s390x freerdp-3.10.3-12.el10_2.6.s390x.rpm 7d59f6a03941d60d1c369a56ae81aac8d4b76bbce024b8d10573239acbc80bba
s390x freerdp-server-3.10.3-12.el10_2.6.s390x.rpm 810719ef4a4988a24946213f08a61d90deccab15951731111f04e36ff67dd6c2
s390x libwinpr-devel-3.10.3-12.el10_2.6.s390x.rpm a18e47cf1ec1445929158350cd2f519dcf925ea4d3eefe6cd9ea8f957ee48d7d
x86_64 freerdp-server-3.10.3-12.el10_2.6.x86_64.rpm 1f5b647a445b5c65a007cfeb6defe9c62e27774d75fad242a9c10465b82c76c5
x86_64 libwinpr-devel-3.10.3-12.el10_2.6.x86_64.rpm 70a4c3395d4025e9864695d0abf013ab2390ca3606013015403b9ba9630ab245
x86_64 freerdp-devel-3.10.3-12.el10_2.6.x86_64.rpm 8712de8ced3a9ad8a1491be4e01aef3af19bef8b5f5278f2f53723c0eb0d4b2f
x86_64 libwinpr-3.10.3-12.el10_2.6.x86_64.rpm b501f14f5e186a43b4308a8285244b7c80e2f9a4e32c543ca7c42458380b799e
x86_64 freerdp-libs-3.10.3-12.el10_2.6.x86_64.rpm cc170912f23610d3e90b45aaf18e65dfc991d0b7374c6b37f9cce4b7f0097d7d
x86_64 freerdp-3.10.3-12.el10_2.6.x86_64.rpm ffac1e4d44179db82cad107b992c6c51979855bfbb9129eecd8476d112ff0a0d
x86_64_v2 libwinpr-devel-3.10.3-12.el10_2.6.x86_64_v2.rpm 31a2708f8be1831677d5a322130f4d4c2817c30cdc21fac4fad2655f2e401670
x86_64_v2 freerdp-devel-3.10.3-12.el10_2.6.x86_64_v2.rpm 4d5b9c35fbea8c1642913151fc8b492bb343b63e261cb2ae18dc8dcac99fbbca
x86_64_v2 freerdp-3.10.3-12.el10_2.6.x86_64_v2.rpm 7931a06d0d8c60d5a6b753ff70fcf6df89cd6a5c5f6846f0082ed026f3a0520d
x86_64_v2 freerdp-server-3.10.3-12.el10_2.6.x86_64_v2.rpm b324236cf9dda78869cd8e7b3cb3f3f77a8871378dbe10b356227771af82150f
x86_64_v2 libwinpr-3.10.3-12.el10_2.6.x86_64_v2.rpm bdfd5f73ca8875fffce192b76c4d26265d5e10900d4d6ef9275cb46d3fba4bd5
x86_64_v2 freerdp-libs-3.10.3-12.el10_2.6.x86_64_v2.rpm f33069672433525f4759eee3093269ced01ed2584d48e93addbbc7aecc79d8d4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.