[ALSA-2026:94510] Important: freerdp security update
Type:
security
Severity:
important
Release date:
2026-11-04
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242) * freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding (CVE-2026-110837) * freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication (CVE-2026-111880) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libwinpr-devel-2.11.7-15.el8_10.aarch64.rpm 3d80df1385ecee30b871066d8f4fce858f3359cb660f377e13cae7464b886c9a
aarch64 freerdp-libs-2.11.7-15.el8_10.aarch64.rpm 40638f9c68c7f52b35638930bc0134b17ce743387ed57750093ff76ec5622d94
aarch64 freerdp-devel-2.11.7-15.el8_10.aarch64.rpm 8acb08de68fd7934690b39f6825c93b41aaf975c262caf19175f6c911439b69a
aarch64 freerdp-2.11.7-15.el8_10.aarch64.rpm aa36de1b90e73c1ad3d574dc2c0cc1f6e929e2925bdb673d8642492cff001270
aarch64 libwinpr-2.11.7-15.el8_10.aarch64.rpm b0221d02123a60da731c6531658937ff73dfe5d62324c50f63aec305ee50ba18
i686 freerdp-devel-2.11.7-15.el8_10.i686.rpm 2a35b6e4d80390eed7913d3cf08c9594fc7b6eb75c229a3e7fc4a581df33dde9
i686 libwinpr-devel-2.11.7-15.el8_10.i686.rpm 3831201d3fbd70ae9702a1ca0045a7b3a31e5773aaf0f8dfe187c4299fa1866d
i686 freerdp-libs-2.11.7-15.el8_10.i686.rpm d25b6f67eb7c318a0960c1fae9ec613e07c33afdcff29529737396fc4d24a02f
i686 libwinpr-2.11.7-15.el8_10.i686.rpm ed30c4d1c835049d57420f18d5b3824dc211f296e869b6dbf9e3f2ed32a6928f
ppc64le freerdp-2.11.7-15.el8_10.ppc64le.rpm 522f3503cf1d3c946f74e1303f71f85ab84d5e1f651dd901b54b3931771969a1
ppc64le libwinpr-2.11.7-15.el8_10.ppc64le.rpm a75b1fde79fcb4b228b9343d54d07fc3cb1b163685a6058962db979f1dab1207
ppc64le libwinpr-devel-2.11.7-15.el8_10.ppc64le.rpm b22bcacd579a1e43297df90b379f9e60b03d05d848c6945429576145ed41b2b7
ppc64le freerdp-devel-2.11.7-15.el8_10.ppc64le.rpm d9eb1a52816d9052aacf0e6bbace8be858e90fab8839d17ba7c9047dfc16b845
ppc64le freerdp-libs-2.11.7-15.el8_10.ppc64le.rpm e6ce6676e24b5eaf15e2122ec86e0b088000c622ccf4d0803dca67a434114796
s390x libwinpr-devel-2.11.7-15.el8_10.s390x.rpm 076ccef2c77c5648d7f93a8805c655ccb4d834403c96eab1561bbef0680965eb
s390x freerdp-2.11.7-15.el8_10.s390x.rpm 0c6d089be94ca891c552f34671f1ef67826cfe19f5dea58c8cac648ed3ca06ca
s390x freerdp-libs-2.11.7-15.el8_10.s390x.rpm 77b433f5847ea85b40e15f582ec72699707a164e23c194f14b8eaa767e280947
s390x freerdp-devel-2.11.7-15.el8_10.s390x.rpm 824b05173fcde547eef6e5f6e70c2ba3cf1b9896398d0da6a439ece7310ef053
s390x libwinpr-2.11.7-15.el8_10.s390x.rpm d56510d151e0583bbfbba31e4551e8d5b44760cc3722d0671914bed6e1162a54
x86_64 libwinpr-2.11.7-15.el8_10.x86_64.rpm 007554c126f5bbf7ca55cddf2e911581eed3255ba18ec58f5dc1ab2888e7b701
x86_64 freerdp-libs-2.11.7-15.el8_10.x86_64.rpm 203960ea4904dc3e6d683dd81c58103128e616b50811264de5a44510bf934b31
x86_64 freerdp-2.11.7-15.el8_10.x86_64.rpm 5ea81b098c55a4a806b255baf82625ea4a95872f6c7583ccd41ff58c3bb00290
x86_64 libwinpr-devel-2.11.7-15.el8_10.x86_64.rpm 624ea676ba7e2937c205b037ac2a2eca85a3dddf53229261e28dbbd61ac84965
x86_64 freerdp-devel-2.11.7-15.el8_10.x86_64.rpm bcab27f240c38a2ed9e799761a461b917d895f8f2a308baba05c60e817bed407
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.