[ALSA-2026:61378] Important: freerdp security update
Type:
security
Severity:
important
Release date:
2026-09-04
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses (CVE-2026-67297) * FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301) * FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288) * FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291) * FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing (CVE-2026-67296) * FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup (CVE-2026-67304) * FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling (CVE-2026-67298) * FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption (CVE-2026-73242) * FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling (CVE-2026-73241) * FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU (CVE-2026-63652) * FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194) * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode (CVE-2026-63633) * FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure (CVE-2026-69159) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 freerdp-devel-3.10.3-12.el10_2.10.aarch64.rpm 50ce965b10f15c9ab9a6ebb63a10dc92255f8928e0d69b32315f0dcf00a959eb
aarch64 freerdp-3.10.3-12.el10_2.10.aarch64.rpm 703995f0950bfbb048588418a9cebf4a79423f8b8613a1bd79d0a4139a6cc94b
aarch64 freerdp-libs-3.10.3-12.el10_2.10.aarch64.rpm 7339b7e0b905d8d3cc694cc691570fc20ef4f275975883807f2b9f09129ab292
aarch64 libwinpr-devel-3.10.3-12.el10_2.10.aarch64.rpm 9986ed02746ff07b9369843dd138092d5ccd56e7fe44e69619d2bd83e4797de7
aarch64 libwinpr-3.10.3-12.el10_2.10.aarch64.rpm f8deed69d056b0427b804c8d7fddc733a2333046852cf50ee8f250006dbae68c
aarch64 freerdp-server-3.10.3-12.el10_2.10.aarch64.rpm fdcda76c1b5d1c04ac667d27b3a5fbd4f92a1d7c7ad8820d6d09a449e4640596
ppc64le libwinpr-devel-3.10.3-12.el10_2.10.ppc64le.rpm 13e1b56fccf8f1e63ec2f8529c0dcf893559103806309a787479d1df9fa9daa4
ppc64le freerdp-3.10.3-12.el10_2.10.ppc64le.rpm 32643c8e386a76ebdc7f2dac5bb55fa369d74fbc3b0a6ccc1469cc675a6f3adc
ppc64le freerdp-libs-3.10.3-12.el10_2.10.ppc64le.rpm 41aed9aa5e0e67b5b33534d18c0005e19dbc5d9a6175507eefaa0bafb28fef24
ppc64le freerdp-devel-3.10.3-12.el10_2.10.ppc64le.rpm 68042e25c683e930520ce55920cb9e5c7674a6a06018c473e72daab61d8f52cc
ppc64le freerdp-server-3.10.3-12.el10_2.10.ppc64le.rpm 6a69f1b93793a09e4cdefaedbeaadb70f84aedc0513179739987542ebc1ac5bf
ppc64le libwinpr-3.10.3-12.el10_2.10.ppc64le.rpm 72303d6879223d0f3ad04c110a3bb02d7d6e75dd79edab9a53e86bdef8ae4528
s390x libwinpr-devel-3.10.3-12.el10_2.10.s390x.rpm 0b0c292ad87b1456c410b77094d4e729540f92a4ff364bde00bce57d65f444d4
s390x freerdp-libs-3.10.3-12.el10_2.10.s390x.rpm 0b7b0e4b2676af26f12b86fbbb60b03a58f8ffb771e7588c6b86e0685fd0ab23
s390x freerdp-devel-3.10.3-12.el10_2.10.s390x.rpm 2065dfe2ec6641f201834e50b269cbf8bf1a08ad9491895e855b43c052f14078
s390x libwinpr-3.10.3-12.el10_2.10.s390x.rpm 3ce7159874118d9467b2dbff8495b8ad9481cc48234307dd5bdb8eeecd6be29b
s390x freerdp-server-3.10.3-12.el10_2.10.s390x.rpm 69f6899dbb95e805ed3256f8fd3b564f320462255dbec23c661f6a73d29fca17
s390x freerdp-3.10.3-12.el10_2.10.s390x.rpm 7e96a77afe77526475cb7ccd71fdf44cedfab8c93008be5d0fefea017bfed434
x86_64 freerdp-libs-3.10.3-12.el10_2.10.x86_64.rpm 02b593c2ce718108c46dc90e50dc68079812831679c58c85e6544e7900717097
x86_64 freerdp-3.10.3-12.el10_2.10.x86_64.rpm 1ff7da8398234605de14b37775c8725fb44175bedeea338614c8ef2b3346490d
x86_64 libwinpr-3.10.3-12.el10_2.10.x86_64.rpm 441acdedaa25baa19270d4e34c9566d9ac7d23b9df10dae2147478c2e7cb43c3
x86_64 libwinpr-devel-3.10.3-12.el10_2.10.x86_64.rpm 5e0321f93baa6317d6840792fa145cc0284d0959c102588a996eb1af686cef68
x86_64 freerdp-server-3.10.3-12.el10_2.10.x86_64.rpm 74166424e964fe6340c4475da33b633971ea307922b5e568ce3bdac6c0c84c63
x86_64 freerdp-devel-3.10.3-12.el10_2.10.x86_64.rpm b9c97eda9f1e778de163b08dd52cf31dd1067b1eaeff7b8ccb2302226c98c5b3
x86_64_v2 freerdp-devel-3.10.3-12.el10_2.10.x86_64_v2.rpm 21584e634c9572908c32b88bc95ece83760b31d80de07cdd3c429d79c68b75d4
x86_64_v2 freerdp-server-3.10.3-12.el10_2.10.x86_64_v2.rpm 2e854c713ea6e6d39c6b6b6c8413e67fd3089a10264cd5f20ccc553940b2904e
x86_64_v2 libwinpr-devel-3.10.3-12.el10_2.10.x86_64_v2.rpm 342166a2b374ae5f0c509606d3cbd55692c0a610d1a0c6f14d1738f7704e5219
x86_64_v2 freerdp-3.10.3-12.el10_2.10.x86_64_v2.rpm 58029d709300b159bc8cae3d5ca0515417f71266ba74ddabaad51446c9ee147a
x86_64_v2 libwinpr-3.10.3-12.el10_2.10.x86_64_v2.rpm 985a07f3671c6cf65a110eba968e279ad0d3af92b651e3975c66a249394ef16b
x86_64_v2 freerdp-libs-3.10.3-12.el10_2.10.x86_64_v2.rpm ef94a960798f376fb9b1bf100de662a5be0f5a3a80496968e91d00539de46a43
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.