Red Hat Product Errata RHSA-2026:3067 - Security Advisory
Issued:
2026-02-23
Updated:
2026-02-23

RHSA-2026:3067 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  • freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

  • BZ - 2429645 - CVE-2026-22855 freerdp: FreeRDP heap-buffer-overflow
  • BZ - 2429649 - CVE-2026-22858 freerdp: FreeRDP global-buffer-overflow
  • BZ - 2429653 - CVE-2026-22859 freerdp: FreeRDP heap-buffer-overflow

Red Hat Enterprise Linux for x86_64 9

SRPM
freerdp-2.11.7-1.el9_7.2.src.rpm SHA-256: c8c3f190c2735acdf4b1805bfa339b24d298aceb12d6aaca4c58de9dc96c909c
x86_64
freerdp-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: 0e70be5af4589bffe99b57d41fbcd53445d581a9637cd0468539069672ca910c
freerdp-debuginfo-2.11.7-1.el9_7.2.i686.rpm SHA-256: 6fb7200d9fefa6239bef115d72d1673e34701e9223ad0cd2bf7bf38025babb2c
freerdp-debuginfo-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: 638a285cd24ad9f5514a982c3b14a95a3c059d2560375907e93ad9515ad6e608
freerdp-debugsource-2.11.7-1.el9_7.2.i686.rpm SHA-256: 7e82ab56a6e7159fe9e3f538a7acc4e4af7d846da651681129655f3dc4d79baf
freerdp-debugsource-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: c1e709d46a10a9e58fe207cefe15ec3cbbfb547c63d08a01ec3a5a2757dee846
freerdp-libs-2.11.7-1.el9_7.2.i686.rpm SHA-256: e889ddf2061982323667dd938b2af3b8bedc6a246edc1048c308c55053660f22
freerdp-libs-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: ba7b26638c54fc9e610d4b1fc3ceef61bb2b3d0fd28910eecf773f7184022a93
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.i686.rpm SHA-256: edfc42c64751d82f465c1c9fddad172ac2dd2f3bf02881774bb759faed84207e
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: de169e8ec703c90fb1de021823a00aa3c983087561fc8fa16cf74895c78cbe72
libwinpr-2.11.7-1.el9_7.2.i686.rpm SHA-256: 9477300bf43410ec0c1f0f829793bc197e100ece12c22a66d670e4dcc297d07c
libwinpr-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: 34309f848c18a3ffa138bd9b521af6177d7054b56e6be54bd517fd75935abaf7
libwinpr-debuginfo-2.11.7-1.el9_7.2.i686.rpm SHA-256: f88046ecfd5d39af567429d5d67747cbb979f3d220b3c77438211dedd7d2d1db
libwinpr-debuginfo-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: a6865c3e35694ca9ad9aef1e8fa6a8549f4bcaf39c0a4c2837b3277283c0ce3f

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
freerdp-2.11.7-1.el9_7.2.src.rpm SHA-256: c8c3f190c2735acdf4b1805bfa339b24d298aceb12d6aaca4c58de9dc96c909c
s390x
freerdp-2.11.7-1.el9_7.2.s390x.rpm SHA-256: cb945bd3510b8d9b4064a0adde6fcc3b36519c966c25340d886bdc71b34c1419
freerdp-debuginfo-2.11.7-1.el9_7.2.s390x.rpm SHA-256: 7b899e38bad21b5f1ceba66a7797203ab0cfe7e75f37017f917219b89bb869d3
freerdp-debugsource-2.11.7-1.el9_7.2.s390x.rpm SHA-256: ab8d2bed71e7515ffa0588201cabdf18d663db04ad22aa07cabe1b8b8c5ca3a4
freerdp-libs-2.11.7-1.el9_7.2.s390x.rpm SHA-256: 4e487d7c11421eee78cb8fc15d2a52a3a58f8f25927ff48de4dd9f28404eb5d9
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.s390x.rpm SHA-256: af8f9bd3b50cf0af9ca27f0d3b1d20abaf7e56982d711e51c625ce36e88b6928
libwinpr-2.11.7-1.el9_7.2.s390x.rpm SHA-256: c0c5de27025602869a91894ba927991f256bb3a8a72b0bc6f32f23a032a705c4
libwinpr-debuginfo-2.11.7-1.el9_7.2.s390x.rpm SHA-256: c799682e7301fb524ef3c0082fa36d9878f86e922ea7910342daf69569f9a322

Red Hat Enterprise Linux for Power, little endian 9

SRPM
freerdp-2.11.7-1.el9_7.2.src.rpm SHA-256: c8c3f190c2735acdf4b1805bfa339b24d298aceb12d6aaca4c58de9dc96c909c
ppc64le
freerdp-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: 11f1651fc6b8da822b353d117efa990418230fb797be90bbed445a20ea4283e7
freerdp-debuginfo-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: d704fe5a63e21302164d3f068ac841dadc92ee2fae11c277f5ebb27ceb6bd027
freerdp-debugsource-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: d7412450266d55d3c51686c13714417925614b9ecdc8b0486aa5734b67db913c
freerdp-libs-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: 6d0f4819e0c2757790bd5963c5e2961e37b73d1629e402f16ce7e4bd86b7d66d
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: b1329e00e69897ab5ef61582d50d39c4b8750fe7c327f4ab34c5da86891787bd
libwinpr-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: add49e0ae998d5b88dfb7e03a7e49a707f5b62933732fa94f697d40462a5d4b5
libwinpr-debuginfo-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: 73d6e536e80284f96098eb03a7fe32f41eab1cf48017f16c775ce56df5eeaf4c

Red Hat Enterprise Linux for ARM 64 9

SRPM
freerdp-2.11.7-1.el9_7.2.src.rpm SHA-256: c8c3f190c2735acdf4b1805bfa339b24d298aceb12d6aaca4c58de9dc96c909c
aarch64
freerdp-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: 7f375436df8d08328035bcb77e79ab59d0f5d34371040a0255d221f1d0c56592
freerdp-debuginfo-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: b90295d1d823c7679fe3790e3d709a29ededdfc32b88a3b0fd926d4fa58d0ef6
freerdp-debugsource-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: 9702547e6ec39f1172ebca1f9bc6fc67f8325cf125a1f200903fd0072a176b58
freerdp-libs-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: eb42b5191951f36cc8b88984ea011107e200fca975ed9f8e7525b9ca8b0d8b7e
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: 19319f15681085015ae938860d24f45dbfc7adf29c59ea952832686d36fed5c1
libwinpr-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: 82caf0aa8141f59d55ae6fc47b83460eb29b562b36c5bd4b1277bfa3ad832fbf
libwinpr-debuginfo-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: b851b8ee12830fa140758e879f8ba24a6574d76360888f4e2113687d4daf5e8a

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
freerdp-debuginfo-2.11.7-1.el9_7.2.i686.rpm SHA-256: 6fb7200d9fefa6239bef115d72d1673e34701e9223ad0cd2bf7bf38025babb2c
freerdp-debuginfo-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: 638a285cd24ad9f5514a982c3b14a95a3c059d2560375907e93ad9515ad6e608
freerdp-debugsource-2.11.7-1.el9_7.2.i686.rpm SHA-256: 7e82ab56a6e7159fe9e3f538a7acc4e4af7d846da651681129655f3dc4d79baf
freerdp-debugsource-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: c1e709d46a10a9e58fe207cefe15ec3cbbfb547c63d08a01ec3a5a2757dee846
freerdp-devel-2.11.7-1.el9_7.2.i686.rpm SHA-256: f19a355cee398a2e88ce80aa9dec309e72492c2d93277b5f327cbba764dcb467
freerdp-devel-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: 8843c40ade1bff64791eb1cfae3a83fddc1db70ec5a67be363ef77c3e209bff4
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.i686.rpm SHA-256: edfc42c64751d82f465c1c9fddad172ac2dd2f3bf02881774bb759faed84207e
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: de169e8ec703c90fb1de021823a00aa3c983087561fc8fa16cf74895c78cbe72
libwinpr-debuginfo-2.11.7-1.el9_7.2.i686.rpm SHA-256: f88046ecfd5d39af567429d5d67747cbb979f3d220b3c77438211dedd7d2d1db
libwinpr-debuginfo-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: a6865c3e35694ca9ad9aef1e8fa6a8549f4bcaf39c0a4c2837b3277283c0ce3f
libwinpr-devel-2.11.7-1.el9_7.2.i686.rpm SHA-256: 0b93935728d13f5f849dca0cef90e6d6d1f4fb64177bce28a57cb3218d2940f3
libwinpr-devel-2.11.7-1.el9_7.2.x86_64.rpm SHA-256: b265f0f79803f0acc625f7ff519cb50ad22c45a735fbf5f2bc6759a772ac01ec

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
freerdp-debuginfo-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: d704fe5a63e21302164d3f068ac841dadc92ee2fae11c277f5ebb27ceb6bd027
freerdp-debugsource-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: d7412450266d55d3c51686c13714417925614b9ecdc8b0486aa5734b67db913c
freerdp-devel-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: 83ad5d52db29aed3db53d7b19cba69b1f02fc8c65615bad2cf5d824b0bbe4af2
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: b1329e00e69897ab5ef61582d50d39c4b8750fe7c327f4ab34c5da86891787bd
libwinpr-debuginfo-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: 73d6e536e80284f96098eb03a7fe32f41eab1cf48017f16c775ce56df5eeaf4c
libwinpr-devel-2.11.7-1.el9_7.2.ppc64le.rpm SHA-256: 539bdb86b8aafdd98688bd131e04029851ca8022193102c2bc77ce03b05557bb

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
freerdp-debuginfo-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: b90295d1d823c7679fe3790e3d709a29ededdfc32b88a3b0fd926d4fa58d0ef6
freerdp-debugsource-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: 9702547e6ec39f1172ebca1f9bc6fc67f8325cf125a1f200903fd0072a176b58
freerdp-devel-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: db1c17cd66d6a40aeba1fddace56787d226ae757a2576c59ea7c5669652ba5a9
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: 19319f15681085015ae938860d24f45dbfc7adf29c59ea952832686d36fed5c1
libwinpr-debuginfo-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: b851b8ee12830fa140758e879f8ba24a6574d76360888f4e2113687d4daf5e8a
libwinpr-devel-2.11.7-1.el9_7.2.aarch64.rpm SHA-256: c029edfa020efad36720dcc0709e4f1b5b70b9275af1b0a51b383c60292ef178

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
freerdp-debuginfo-2.11.7-1.el9_7.2.s390x.rpm SHA-256: 7b899e38bad21b5f1ceba66a7797203ab0cfe7e75f37017f917219b89bb869d3
freerdp-debugsource-2.11.7-1.el9_7.2.s390x.rpm SHA-256: ab8d2bed71e7515ffa0588201cabdf18d663db04ad22aa07cabe1b8b8c5ca3a4
freerdp-devel-2.11.7-1.el9_7.2.s390x.rpm SHA-256: 1a791404197786282ef04adba0b5e0d0f18feec6baa421893e4676f95edc3846
freerdp-libs-debuginfo-2.11.7-1.el9_7.2.s390x.rpm SHA-256: af8f9bd3b50cf0af9ca27f0d3b1d20abaf7e56982d711e51c625ce36e88b6928
libwinpr-debuginfo-2.11.7-1.el9_7.2.s390x.rpm SHA-256: c799682e7301fb524ef3c0082fa36d9878f86e922ea7910342daf69569f9a322
libwinpr-devel-2.11.7-1.el9_7.2.s390x.rpm SHA-256: 76b24c5eef28c76d123db869be7ffac841f5986cd3437cdf8bfa7d78cc74149f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.