[ALSA-2026:62571] Important: freerdp security update
Type:
security
Severity:
important
Release date:
2026-09-02
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301) * FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288) * FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291) * FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 freerdp-2.11.7-12.el8_10.aarch64.rpm 01f4af99706c292fc05443a939d29fdd0444bac1291503ab60fae5cded089d42
aarch64 libwinpr-2.11.7-12.el8_10.aarch64.rpm 195a1161c02a1c33253c9e7404738cf7a15032e9470bd770e63a26200427d822
aarch64 freerdp-libs-2.11.7-12.el8_10.aarch64.rpm 49a995b13b9599250f09d6edc0c159317f1805c878f32151f16529c3b1634c37
aarch64 freerdp-devel-2.11.7-12.el8_10.aarch64.rpm 6f6c628a4e8632659f32b7cf317a3ba5ee5dd56c6206b4895e2734fb6a524b11
aarch64 libwinpr-devel-2.11.7-12.el8_10.aarch64.rpm 9765dcd564c2b20ade689c7eb4db97b388fff21b03fa92bec4459855dd0152da
i686 freerdp-devel-2.11.7-12.el8_10.i686.rpm 337231e8d3ac1e9c2c8a3c45b94fe535ef6d52b1c43c2bb3b6755234cda70ff4
i686 libwinpr-devel-2.11.7-12.el8_10.i686.rpm 902a5dca1567f7de65974d7c8711ec4df0ce49e37fd03b9359a6acc0a6b02f35
i686 libwinpr-2.11.7-12.el8_10.i686.rpm 9f856501c33afe2f5b50188cf481a60742e51f1152818fff4847be9fb0b5c031
i686 freerdp-libs-2.11.7-12.el8_10.i686.rpm ad0f02c93162da43a4980672a68cf6972de097de55d4514854cbeba224d306d9
ppc64le libwinpr-devel-2.11.7-12.el8_10.ppc64le.rpm 016f6a0ef79816d7478f13df72ec8a917bed989f394fb0b0dad3d0e0e4c077fe
ppc64le freerdp-2.11.7-12.el8_10.ppc64le.rpm 6008c3173f9ba376c487e5651ecc68f8606df8a7fd84a687fcbfd4770a8a673c
ppc64le freerdp-devel-2.11.7-12.el8_10.ppc64le.rpm 833dd9caa3d4bbc191ccc4b134ef44a42ec3e3a02ce608d865bbcd028d869733
ppc64le freerdp-libs-2.11.7-12.el8_10.ppc64le.rpm 98558f9e0039a0b09458cebc28359008d8cbc8577f2eb0a2bc37843201a54c4e
ppc64le libwinpr-2.11.7-12.el8_10.ppc64le.rpm f86dc45718d4c55ca703ed40bbd0e46ae4b75cd04bfa5ea415f9f66727238506
s390x freerdp-devel-2.11.7-12.el8_10.s390x.rpm 1fd0724c1f3afb7b6ef8956bbe85e271585d53cd9e6747a75fbec19085fb7eee
s390x freerdp-2.11.7-12.el8_10.s390x.rpm 95aafa3deecc5763f2563f42537bb264c668fc7ee44426b650f836da6ce02ead
s390x freerdp-libs-2.11.7-12.el8_10.s390x.rpm c8b8decc4d91aeb07ee43282c4d063939454cc829fa9412ab9625674ca5041d6
s390x libwinpr-devel-2.11.7-12.el8_10.s390x.rpm d9da11d792bba7ace0fa6063485a4eab839b3467e481b24824b8db7cebbfdf0f
s390x libwinpr-2.11.7-12.el8_10.s390x.rpm f61be94d8bee55162cfd0b66648bf99b55a55b328df7ada97ada183a0748f36e
x86_64 freerdp-2.11.7-12.el8_10.x86_64.rpm 18a2c21fca62938ad8d01704180c3011545150cc194a06ae55c8fb71b21a9ab3
x86_64 freerdp-devel-2.11.7-12.el8_10.x86_64.rpm 1e39bcec88e14b94ddcdbce4676ba187b18232d148c6f7e8df24c48961ff1ee6
x86_64 libwinpr-devel-2.11.7-12.el8_10.x86_64.rpm 59ed5ba1c2393c873e9d8f644ac8bf862a29c2a329bd051c51abd9e0ce794b76
x86_64 libwinpr-2.11.7-12.el8_10.x86_64.rpm 9d54bda00b7a133cc478c6494794d1e883fc2bc0b42b088fbc1c73b60c4d4d54
x86_64 freerdp-libs-2.11.7-12.el8_10.x86_64.rpm f0e463f0d573e96c90d2290dfe7139958749407de84a311d42570b4ec0e38796
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.