[ALSA-2026:76747] Important: freerdp security update
Type:
security
Severity:
important
Release date:
2026-10-07
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954) * FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964) * FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956) * FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963) * FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959) * FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libwinpr-devel-2.11.7-14.el8_10.aarch64.rpm 0ab305484b23fda302cfea6670ad6d64e7dfe4692cfe6856170104fba708f11b
aarch64 freerdp-libs-2.11.7-14.el8_10.aarch64.rpm 3ba7803be29a3284f11e647688f54d64e1f913b4b8952e41c84bdf1f7d577b6c
aarch64 libwinpr-2.11.7-14.el8_10.aarch64.rpm 54a07fd142aeeb27ecce1a78e6f45df8c82909ece52895c17ff577f422264594
aarch64 freerdp-2.11.7-14.el8_10.aarch64.rpm 99f1a3c097a47537d12cf1928ae0a265ce65c810d368df328f92a41b8e281a43
aarch64 freerdp-devel-2.11.7-14.el8_10.aarch64.rpm b3ebb8f083aec454c68e086805dbf13170aef924a4e5bad5b4ff3f388ae662ec
i686 freerdp-devel-2.11.7-14.el8_10.i686.rpm 124386ddd8761f5845b16a17600ee1e36b55d2ad77562f89e589befc3d617388
i686 libwinpr-devel-2.11.7-14.el8_10.i686.rpm 21d49cb51710dde5d30e1e5f1c3d5335bf04500fe7db98a49e67bab6a99d03f7
i686 libwinpr-2.11.7-14.el8_10.i686.rpm 3292a2e588f9e8087b15a4ba6e3a62086ea0a47a184c56a796cb396024ff58eb
i686 freerdp-libs-2.11.7-14.el8_10.i686.rpm e6fa984595a7dac31e5895f72318b91e79694982f1334d15cc6647388ed87e71
ppc64le freerdp-devel-2.11.7-14.el8_10.ppc64le.rpm 6628223f48ffad8319fc8851ae227029331d2c1bee1fd5cc89ece490fc0f0d9b
ppc64le libwinpr-2.11.7-14.el8_10.ppc64le.rpm 745ea0f5b823e7692b616b7d17ac5f491c37060b7461e51fb2bc2aedf1ca7e9a
ppc64le freerdp-libs-2.11.7-14.el8_10.ppc64le.rpm 8dde998457e9c77f1776c4f752529dc0e2ab7d221c9719a23aa13038ebcb9365
ppc64le freerdp-2.11.7-14.el8_10.ppc64le.rpm 92aaaca41adabc645245cbfd56a01715c5083916238f31cbeba7c22ec70f2ac8
ppc64le libwinpr-devel-2.11.7-14.el8_10.ppc64le.rpm ab54ae4401f9e074fe43b5cbb41591820addbad4aeda02bc1e7b858fa117ed0e
s390x freerdp-libs-2.11.7-14.el8_10.s390x.rpm 023ee53f16ef5f3ca9fc78361f380340ebefceac5f539479441e252f84bb7b1c
s390x freerdp-2.11.7-14.el8_10.s390x.rpm 1d0160fcb75f39b1b512a11de3960ec6d7db419b296f45ca0bec87abf9e31903
s390x freerdp-devel-2.11.7-14.el8_10.s390x.rpm 801fe3b9f49a900306461dece873441e47e3f92862b864eddd6116ef76d1c1bb
s390x libwinpr-devel-2.11.7-14.el8_10.s390x.rpm a25642b42f218da461637f0a18e1c7658bceb5f28ed11fe18512de3914745464
s390x libwinpr-2.11.7-14.el8_10.s390x.rpm d23a2ccad373062fd07c118a9d9ec96c163bc36af66feffcc624c34e38fa50d5
x86_64 libwinpr-devel-2.11.7-14.el8_10.x86_64.rpm 7217c7d19d1d175a5263d51dd1bd6174d6379dc478a7961ded6a6381738486ba
x86_64 freerdp-2.11.7-14.el8_10.x86_64.rpm 84f89c908fb7c1f8ac0415cdce80c8aa7d2563d18e5b2a70df76cc148d670019
x86_64 libwinpr-2.11.7-14.el8_10.x86_64.rpm dc4b40372dd96772001ad52fec285552f55e1744e3197c918bf8d49e38ebd9ed
x86_64 freerdp-devel-2.11.7-14.el8_10.x86_64.rpm e27ac216bb131468d9f37bb6363d7aaa12056ae227c36cdf1782f824e75ab4be
x86_64 freerdp-libs-2.11.7-14.el8_10.x86_64.rpm e768213cf74255774309059efb692b7c719e3e41df6b900cb855299c7006d678
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.