[ALSA-2026:76755] Important: freerdp security update
Type:
security
Severity:
important
Release date:
2026-10-09
Description:
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954) * FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964) * FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956) * FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963) * FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959) * FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 freerdp-2.11.7-7.el9_8.8.aarch64.rpm 43f946ee4412fedc16e314bedcdebccfbcaf73e775d45e6d7f59defd439d5223
aarch64 freerdp-libs-2.11.7-7.el9_8.8.aarch64.rpm 600bafc186c0bb37b5aeff813b21861c062e1bbdb6da1689c1000413b0067007
aarch64 libwinpr-2.11.7-7.el9_8.8.aarch64.rpm 74280bc079ba660e7ae7d7160e88ff861f8bb1407274cad1d73a14d6af5cb80c
aarch64 libwinpr-devel-2.11.7-7.el9_8.8.aarch64.rpm cb66de8c75dae34d8640b1daedac3eaa9766f0c976c60f77d29c89adcdba3bd0
aarch64 freerdp-devel-2.11.7-7.el9_8.8.aarch64.rpm d7639ca3b9adfebfe3f4dd9c3c2b01b87aaa552c036a4e08eb1482ce4b20abbb
i686 libwinpr-devel-2.11.7-7.el9_8.8.i686.rpm 0edee1749e258e4451266a096beae15b24e6920f33d5a3186f655951c925333a
i686 freerdp-devel-2.11.7-7.el9_8.8.i686.rpm 708b7b175fbe16856ce717332bb11656f82a7ff8b82964a8be896dc0cf99e19d
i686 libwinpr-2.11.7-7.el9_8.8.i686.rpm 75c7849d5e457d549bba5b75d8b526a9ba51914105e365dd77de0e280af1c153
i686 freerdp-libs-2.11.7-7.el9_8.8.i686.rpm 7855ad39d9db1fee31fbe04ab6bfdd23082dc0a815708331c2648dac64e9c592
ppc64le libwinpr-2.11.7-7.el9_8.8.ppc64le.rpm 0f8bca70f07cb7d2a62bd0604cd536bbb83b31aba1a1ba652afc80298ffb3eae
ppc64le libwinpr-devel-2.11.7-7.el9_8.8.ppc64le.rpm 162240b9f9510c6a5014b319b8ef758ec731af712029f997219952f3af26040e
ppc64le freerdp-devel-2.11.7-7.el9_8.8.ppc64le.rpm 54932fb06fbb98ba18b249650699644318201cd0d6c264752fe7c681227d91ed
ppc64le freerdp-libs-2.11.7-7.el9_8.8.ppc64le.rpm 5bc4a7e2b53fb8841be502a10644e66ec28759fc33a26c9909f3507f758bd255
ppc64le freerdp-2.11.7-7.el9_8.8.ppc64le.rpm f14f3cfc60e5d8abb508f1eb82129133b107960015fdf8cd9cbdffbf56b6a9ed
s390x libwinpr-2.11.7-7.el9_8.8.s390x.rpm 2ec62488735ef19aef119dda2b7ef03ae3070be1e40c9d52efd44c6b48ffbbd6
s390x freerdp-libs-2.11.7-7.el9_8.8.s390x.rpm 61bcd1ea7e2ed248dd82ca6016775f6b6214991b6e6de369b2cb87a752c165ba
s390x freerdp-devel-2.11.7-7.el9_8.8.s390x.rpm 9df5f87df47a75ac8aa6a354dbd97975ec678adbc500f67d7439cad7c74b43b9
s390x freerdp-2.11.7-7.el9_8.8.s390x.rpm a6c878449034ac647de8cad963da01bc8a5dade170a5387055d0bd9fb8cb6495
s390x libwinpr-devel-2.11.7-7.el9_8.8.s390x.rpm a8d03922a46c54afc4a1007731979151c5861b46f98796cabf26057deacd263c
x86_64 libwinpr-2.11.7-7.el9_8.8.x86_64.rpm 00cc6a633ab1cf0130d6fb34541d6946538a7cb10ad5a2ada3046a65f4531779
x86_64 freerdp-2.11.7-7.el9_8.8.x86_64.rpm 545048af69dbec20f8568b4ef72113e8d17666e689f4c585d1e76216d78d10db
x86_64 libwinpr-devel-2.11.7-7.el9_8.8.x86_64.rpm 731a63b45a1b0ef3e42c72c36cac808ee99d2bc56ceedf0be59bbfd2d57b5024
x86_64 freerdp-libs-2.11.7-7.el9_8.8.x86_64.rpm b55b4f6397109f43a4c99e4db2d1e407f4adea22ca84d0dbae6c21ac104e26fa
x86_64 freerdp-devel-2.11.7-7.el9_8.8.x86_64.rpm f5dc398eb38d7b4f95f4ea5ede80f28bb7f1ab8bb7efca793b3c721d626e16ad
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.