[ALSA-2026:94514] Important: freerdp security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-11-04
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242) * freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect (CVE-2026-109676) * freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch (CVE-2026-110838) * freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling (CVE-2026-110830) * freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding (CVE-2026-110837) * freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly (CVE-2026-110833) * freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion (CVE-2026-110839) * freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser (CVE-2026-111378) * freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file (CVE-2026-111379) * freerdp: freerdp: Arbitrary code execution via crafted persistent cache file (CVE-2026-111381) * freerdp: freerdp: Arbitrary code execution via crafted display frames (CVE-2026-111382) * freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication (CVE-2026-111880) * freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats (CVE-2026-114045) Bug Fix(es) and Enhancement(s): * Rebase FreeRDP to 3.32.2 or newer [rhel-10.2.z] (JIRA:RHEL-277442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 freerdp-libs-3.32.2-1.el10_2.aarch64.rpm 0ed9e0f1b50aba36197001c46b6a1e0a316239373cb6650e280d884ca27f539c
aarch64 freerdp-devel-3.32.2-1.el10_2.aarch64.rpm 1287a4d32bd150930d42d1f2dffedbfd4083ca111358fa59ff2b293423c91456
aarch64 libwinpr-devel-3.32.2-1.el10_2.aarch64.rpm 2e86c5d0507fa88b2798e74f91f5c699dac96913574050d2e69bb5e13b26b1b0
aarch64 freerdp-3.32.2-1.el10_2.aarch64.rpm 733e1be37f1601c836b64686977cf0cffaf2292c2e8da4654831ec7b54d49e40
aarch64 libwinpr-3.32.2-1.el10_2.aarch64.rpm 7b182c4e1ea7d86ffb08ccde57151d2d1fdffa79349a7ab25a1aac319a57c5f3
aarch64 freerdp-server-3.32.2-1.el10_2.aarch64.rpm cd8e6de3857f4d5738ef719e6afc02d7ba168262d09329c5511f343c44cfcc97
ppc64le freerdp-server-3.32.2-1.el10_2.ppc64le.rpm 34d9d43b6ab54d463eea850d2051bd392aa8a90702c1f9345c3ab718d333b083
ppc64le libwinpr-3.32.2-1.el10_2.ppc64le.rpm 36f5038b8c9f1954c7f89625b6b68713ccccce394fc4a885fdd69c87b0a9ec9a
ppc64le freerdp-devel-3.32.2-1.el10_2.ppc64le.rpm 72c2f5d966cc7319c6474da4fa89ed4a954ed7de208186441225e1a125ea200d
ppc64le libwinpr-devel-3.32.2-1.el10_2.ppc64le.rpm 86b35721bc05c36d45622f491ae3f9a4369d59daca11346369480990292eafee
ppc64le freerdp-libs-3.32.2-1.el10_2.ppc64le.rpm d14a3673d963860c472e8b7663af75cc65865ee3a93a9f09a1f265d52403a903
ppc64le freerdp-3.32.2-1.el10_2.ppc64le.rpm dd9cca9b3779a391ff05c2f355a1645db940e32dce1aaf1053a0cd80f257d9f0
s390x freerdp-3.32.2-1.el10_2.s390x.rpm 117e3b7d6632f5bede175c0484613c8900011ce5839b4c24b135023ab78e82b4
s390x libwinpr-devel-3.32.2-1.el10_2.s390x.rpm 27dcafc5e0e1bf25efd86f7f3b9e4926f8e4759b6df1fb1fbd8064b9fbfd1815
s390x freerdp-devel-3.32.2-1.el10_2.s390x.rpm 4bdc2555f294704e1ed1a73e0504b62061e2efbfb78943901b3bcfd46f2da0f0
s390x freerdp-server-3.32.2-1.el10_2.s390x.rpm a434198f86d265658b167ee61709cc8754b7b8f33b72c1ca068023a07f95946e
s390x freerdp-libs-3.32.2-1.el10_2.s390x.rpm c97859761ea5eccbbda82c5c64a52126d61e33c8322a0ade2b153a0c8cf13a56
s390x libwinpr-3.32.2-1.el10_2.s390x.rpm f1222f58bfa5dea7c008e342cf389d593b85ad01c420eeac11d8a4351fd6debf
x86_64 freerdp-3.32.2-1.el10_2.x86_64.rpm 0877f798858c735ab3edaf1fd487b749f2454eade14b5e05d28917f5449a2676
x86_64 libwinpr-devel-3.32.2-1.el10_2.x86_64.rpm 2a23f7bbd485b237dfb8eed8da32791ca4e5ac508ec2ec8d478f7909de3faead
x86_64 freerdp-libs-3.32.2-1.el10_2.x86_64.rpm 926a0db2410b7e67987aafba9af2414b1dbef3342279490531dfa428eaa4bc63
x86_64 freerdp-server-3.32.2-1.el10_2.x86_64.rpm 9b02f968a99feb3c59a06b47923ccc415a1abf48212ae377c9b1b45e5382fe2a
x86_64 libwinpr-3.32.2-1.el10_2.x86_64.rpm 9dc39d5e9ff00c0455862df18073720f7b19e774354d701afaec242df161265f
x86_64 freerdp-devel-3.32.2-1.el10_2.x86_64.rpm ae2f321725f2384a43ff58d03ad82c06b3039afc252b8dce76f2260931329633
x86_64_v2 freerdp-3.32.2-1.el10_2.x86_64_v2.rpm 42ac18b51a95e49572df336cfa4e5b39e55e866d2615604a3bb44555a02525ea
x86_64_v2 freerdp-server-3.32.2-1.el10_2.x86_64_v2.rpm 99c73b773caa7c0f4f5a1db8ecd40aaccfdf1032bc8a204130785fd2c061ddb3
x86_64_v2 freerdp-devel-3.32.2-1.el10_2.x86_64_v2.rpm bc782604ffd793e915d8f46c203671632c9fb73b4bd24adb6302eaf79d7dd87f
x86_64_v2 libwinpr-devel-3.32.2-1.el10_2.x86_64_v2.rpm c79be17cac6da168fbace4225346b8a11801023f4315c69edf64f785d38d26fd
x86_64_v2 freerdp-libs-3.32.2-1.el10_2.x86_64_v2.rpm e28477f355afd9cc0f10f5259d083da93b11805cfc880d1f78128a8a04a26262
x86_64_v2 libwinpr-3.32.2-1.el10_2.x86_64_v2.rpm fca0185389f5999cf93a8b1621094ce5f60688415c4e39ae0207cb9961861b00
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.