[ALSA-2026:75570] Important: freerdp security update
Type:
security
Severity:
important
Release date:
2026-10-06
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU (CVE-2026-85089) * FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954) * FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964) * FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU (CVE-2026-91946) * FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956) * FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963) * FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption (CVE-2026-91947) * FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959) * FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure (CVE-2026-91950) * FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR (CVE-2026-91960) * FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 freerdp-3.10.3-12.el10_2.14.aarch64.rpm 06977562df0bdc4f404fb309518b2ceeae5de60322303d6253d1587feba95a90
aarch64 libwinpr-devel-3.10.3-12.el10_2.14.aarch64.rpm 386e37e55da6aa3213dd9949b63200820a77e47b613c1447b419b9dee299ea6a
aarch64 freerdp-libs-3.10.3-12.el10_2.14.aarch64.rpm 50dd7ef6804b664f59397efc9ee9cccc073c0e56cca0c5b8d0791b5490ecf9d0
aarch64 freerdp-server-3.10.3-12.el10_2.14.aarch64.rpm d57d59c458761e6c2500bb3999a17bc6ee5907ad3d3a4d7144d4157d18b471cd
aarch64 freerdp-devel-3.10.3-12.el10_2.14.aarch64.rpm f7bbbb7e0c37bd4812ab63eff819620b41dc7feeada5e85c9a77bb774b3fd80a
aarch64 libwinpr-3.10.3-12.el10_2.14.aarch64.rpm faa4e0cd66ede292f59a944252b259a0c1648b9a5c79e52521933fe6dd548079
ppc64le libwinpr-devel-3.10.3-12.el10_2.14.ppc64le.rpm 2322919f7d58d453dbe0bae4c68f232cf8ca5bf1038f53d590f889168f2fd0b7
ppc64le freerdp-devel-3.10.3-12.el10_2.14.ppc64le.rpm 4c51ab508e693a76d80df6e5c91d46bf0225fe8080de7d8268a05a83f189f332
ppc64le freerdp-3.10.3-12.el10_2.14.ppc64le.rpm a03451438f1c274340ea9d5297e7fc1158e223a3fa7603538495e67f73eb7ab5
ppc64le freerdp-libs-3.10.3-12.el10_2.14.ppc64le.rpm b26d5638e767f0b872230836009dfd59b2feaadd1074b8e78b5b92013f55c900
ppc64le libwinpr-3.10.3-12.el10_2.14.ppc64le.rpm c151137b2d0d6f06cbec54411643e78e99c4f63cc755334fd3cc01e393270816
ppc64le freerdp-server-3.10.3-12.el10_2.14.ppc64le.rpm e8899e6fcc66e62824be4e471424722918744f65456cc219a2ef8f6d3e98059d
s390x freerdp-server-3.10.3-12.el10_2.14.s390x.rpm 47270931613eab644ab613ae3560a81dec10be06d5b6d27d5b72c2f1da81bcf4
s390x freerdp-libs-3.10.3-12.el10_2.14.s390x.rpm 5c145e975dc076e8f8c125f66d7e7e9222c2c5bbf4177e6ef604a16e2e5389a0
s390x libwinpr-3.10.3-12.el10_2.14.s390x.rpm 66d077e36e82aba0190ad7bf44d992226022da5397aaa68cab62e3fe4cc0be49
s390x libwinpr-devel-3.10.3-12.el10_2.14.s390x.rpm ce6a1dcc45c2bd6dae01d0043fdb8f13d7653cd4a1101fa163aec17f6b9e4304
s390x freerdp-devel-3.10.3-12.el10_2.14.s390x.rpm ed237929d905d0d7c63343e6744ca63e4c5f4211b316cab3578dd8f9c9ab3af7
s390x freerdp-3.10.3-12.el10_2.14.s390x.rpm ee0a9980bec2413cfa3d48a98389376e0ebc8f6dfecd30d165d392e7321ec456
x86_64 libwinpr-3.10.3-12.el10_2.14.x86_64.rpm 0c8d5b8e75b30dda950b634e4a5d104b3f8e2a4804ae5e43ebb9f8ca1121a04c
x86_64 freerdp-libs-3.10.3-12.el10_2.14.x86_64.rpm 10a4f2b8cef0299d81da5c289628a44a6aebfe4e5f0b46fb3eaf82ca49fb505e
x86_64 freerdp-devel-3.10.3-12.el10_2.14.x86_64.rpm 13701982780cc7495d8993aa3cef80014d60aef2ae967103ac977020b47b5cc5
x86_64 libwinpr-devel-3.10.3-12.el10_2.14.x86_64.rpm 669cf094fcd8c10204e35912ec5a6b9090c13aa6dfd8e52929d2d1492c97371b
x86_64 freerdp-3.10.3-12.el10_2.14.x86_64.rpm 7f151291cfc15103e0ad0fc9962aa66386b9102e88f94c9d4bd389f30f3b0dce
x86_64 freerdp-server-3.10.3-12.el10_2.14.x86_64.rpm e9982fe2e3d8f6a1d4e5bc81524c9681c6b7ae4b0e6786eb7115b901af1ab2fa
x86_64_v2 freerdp-devel-3.10.3-12.el10_2.14.x86_64_v2.rpm 13f3c5670b3816938bc100bfe138440073dc95bb8d2b76c35c1280dce0496828
x86_64_v2 freerdp-server-3.10.3-12.el10_2.14.x86_64_v2.rpm 32943e9f68f5448f7499899d9ece325e372cd0229def7dc9df56713f9d70c13d
x86_64_v2 freerdp-libs-3.10.3-12.el10_2.14.x86_64_v2.rpm add80044a58d2aa8952a06291a66e337500e1356aed354dbfc4ef2730450c07d
x86_64_v2 libwinpr-3.10.3-12.el10_2.14.x86_64_v2.rpm bf2d015f31a1f6a382560140edb3ecbc850462d97e9f9899e98c0e7d8f5b6716
x86_64_v2 freerdp-3.10.3-12.el10_2.14.x86_64_v2.rpm cb5ff540c701fb7c98467e47e5444abccb3528eebb87075d22f82428404239fe
x86_64_v2 libwinpr-devel-3.10.3-12.el10_2.14.x86_64_v2.rpm e55d4c0ac0b9fa7fd00aca64019e8f206d07c6e2d0d77963ca6a0e7e58cb3624
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.