红帽产品勘误 RHSA-2026:3068 - Security Advisory
发布：
2026-02-23
已更新：
2026-02-23

RHSA-2026:3068 - Security Advisory

概述

Important: freerdp security update

类型/严重性

Security Advisory: Important

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for freerdp is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22853)
  • freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)
  • freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write (CVE-2026-24678)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

修复

  • BZ - 2429645 - CVE-2026-22855 freerdp: FreeRDP heap-buffer-overflow
  • BZ - 2429647 - CVE-2026-22853 freerdp: FreeRDP heap-buffer-overflow
  • BZ - 2429649 - CVE-2026-22858 freerdp: FreeRDP global-buffer-overflow
  • BZ - 2429653 - CVE-2026-22859 freerdp: FreeRDP heap-buffer-overflow
  • BZ - 2438197 - CVE-2026-24678 freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write

Red Hat Enterprise Linux for x86_64 10

SRPM
freerdp-3.10.3-5.el10_1.2.src.rpm SHA-256: 0d074ddaff0c1f0ef89631d7371fe0f6d33bd097fff439dad74bb842083eba1b
x86_64
freerdp-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 529eb885d7bb7defb92b0ebed01babbcbbdb37eada02f305befdb7d76fde05ba
freerdp-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 7073292333de5d69e830bad62ba622da084cd89a1d6c2b45a07d66fd10e78801
freerdp-debugsource-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 3eaf4bdee9e697021eaf79186e2b807246d6ad36695128fcc0583e85999028b4
freerdp-libs-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 7cf1937c21c2db54da61cab2886fb6419a3c95a53776639ce5f721251c279004
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 36d2a81088e0c1a9c2b41cea1ae08382e0e71d8279000c9cc74aa910bb0cf9e3
freerdp-server-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 1f2b99259cf62aea4aa5c903d5ff47d7713e1122a1f868902416c0abf3cfc7ef
libwinpr-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: b5cc3613bbeabc2563d84e1552468a5925a394ff6a4e8991f23502be0cf2e280
libwinpr-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 80742c0c30ece5813b52cb75fd955d13b572f4a164047a49a39feb0855a11523

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
freerdp-3.10.3-5.el10_1.2.src.rpm SHA-256: 0d074ddaff0c1f0ef89631d7371fe0f6d33bd097fff439dad74bb842083eba1b
s390x
freerdp-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 4022649b1a373f35fced77e25e5679e2a03ab9a0fcf7149189bae6fe14650479
freerdp-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 5d9084f0fb3c30dae3ac0a1e3eb677ab4b99ca9133428b9fa489b82124d62f07
freerdp-debugsource-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 434893dc6d25d7f062d0581fb61b5d3b5e2a59ab7851ea54cf0ac48bd00de189
freerdp-libs-3.10.3-5.el10_1.2.s390x.rpm SHA-256: e202ac3d27f1c3103f5ce61867f80c76a1f89ca7e1e1ec42ac5e2587b938528d
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 596d3dac4a8b8db9850b2feaff9565f020d6aaf6c0cef8b63679570309b37f8b
freerdp-server-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 44825e0859f0feac683998a26e57f524ba84d1115220dbb4b2681a11625933a4
libwinpr-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 90bc23ced4c8b3f67eef94fc354c39670e2411809558830a19e85f66df9d1436
libwinpr-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: a4d0fd26dca6d3fe71d1a899a70b288dc9f043cd5615e25fca55beb86c92025d

Red Hat Enterprise Linux for Power, little endian 10

SRPM
freerdp-3.10.3-5.el10_1.2.src.rpm SHA-256: 0d074ddaff0c1f0ef89631d7371fe0f6d33bd097fff439dad74bb842083eba1b
ppc64le
freerdp-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: add4458db8131b12dc049d2d60eee3cfb80f964d655b9e4105630a674057b541
freerdp-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 59a2c2cfbb19bde0de9d76932b87800f645d14e833841145f2c0469f3056d049
freerdp-debugsource-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 9d7c57c05a24087c82168d2535f7a8fc6951e4a26511c40b4c1bd042396f4e57
freerdp-libs-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: b6d6173d0fffd029c99710d972c9a033958c7bbc9e4a282ba28b3871611092f3
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 4416e3c5cee54a8f4a81a2bf4df9909bcae099feccfa2cb31bcd40495eada8f2
freerdp-server-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 4d885ba72186c0a1df747232b1948f529327e00b833c940e0a9aa1d3555c801c
libwinpr-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 930cdfd2ae1bceb145ad491404e819a46844f2fb7cd03701feb50cbede7500a2
libwinpr-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 16e81508584069914a1f3f639e20f43108b7baf30cf8b41040480f0b20e9474a

Red Hat Enterprise Linux for ARM 64 10

SRPM
freerdp-3.10.3-5.el10_1.2.src.rpm SHA-256: 0d074ddaff0c1f0ef89631d7371fe0f6d33bd097fff439dad74bb842083eba1b
aarch64
freerdp-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 76d4453571505d39cfd4f595be1b5c35ba8200455d1989a5237e986fc21bda0c
freerdp-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 486b0435ab75d4d1e31e7372c15d13145eaf5fc926e44516c347f4a114fe3499
freerdp-debugsource-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: c09c88bcc5ae98d63d7c04db0bc93740ada75f124618a7f706ad9cc5f1f9cc24
freerdp-libs-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: efaeacba40fe6ebe2075a53574ddac0c1e990232caf6a942c71243dff3852b57
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: afdd93a01c66022f75731eaf353ab3864e7a49f1050d278400b497f6f731ca4a
freerdp-server-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 0aacc6e2be610bb842ea4a8b1fa3807b08bc039304e43d7a03aa24d98c709085
libwinpr-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 9e753801795f709c9a1b22ee321e494e3eb6f613d16f378247e2fdbd012f6a73
libwinpr-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 2c6dcb006a121d0bb563f1fbfdf45b21fbce29ca47d23b03d0048f50b418a431

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
freerdp-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 7073292333de5d69e830bad62ba622da084cd89a1d6c2b45a07d66fd10e78801
freerdp-debugsource-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 3eaf4bdee9e697021eaf79186e2b807246d6ad36695128fcc0583e85999028b4
freerdp-devel-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 34f86501203d7d4366171e68669e7c134578cee47992f0708ca849e6f198b221
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 36d2a81088e0c1a9c2b41cea1ae08382e0e71d8279000c9cc74aa910bb0cf9e3
freerdp-server-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: bd263b88dd18c19140285c7384cefdfb24329f0fc50f51cf5484b0b89dc6a797
freerdp-server-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 1f2b99259cf62aea4aa5c903d5ff47d7713e1122a1f868902416c0abf3cfc7ef
libwinpr-debuginfo-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 80742c0c30ece5813b52cb75fd955d13b572f4a164047a49a39feb0855a11523
libwinpr-devel-3.10.3-5.el10_1.2.x86_64.rpm SHA-256: 1f15e0dd52dfc48b59cb2af3cbf487fdf0ff43b3ee11a7e4c1f046c7dbc50e7c

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
freerdp-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 59a2c2cfbb19bde0de9d76932b87800f645d14e833841145f2c0469f3056d049
freerdp-debugsource-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 9d7c57c05a24087c82168d2535f7a8fc6951e4a26511c40b4c1bd042396f4e57
freerdp-devel-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 82144a5d9b35343c1cb65592fbb1ffc080a92601f54156457c66e5b8ef3a2fbf
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 4416e3c5cee54a8f4a81a2bf4df9909bcae099feccfa2cb31bcd40495eada8f2
freerdp-server-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 1a00bc660b1e9cfa216eb85df027d58df970c46206ced45d55f45e158677dfc5
freerdp-server-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 4d885ba72186c0a1df747232b1948f529327e00b833c940e0a9aa1d3555c801c
libwinpr-debuginfo-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: 16e81508584069914a1f3f639e20f43108b7baf30cf8b41040480f0b20e9474a
libwinpr-devel-3.10.3-5.el10_1.2.ppc64le.rpm SHA-256: b8a1b17cea4d35f79dab600a04865b920b55f0d342ba1a25798b8ea3c67ae956

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
freerdp-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 486b0435ab75d4d1e31e7372c15d13145eaf5fc926e44516c347f4a114fe3499
freerdp-debugsource-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: c09c88bcc5ae98d63d7c04db0bc93740ada75f124618a7f706ad9cc5f1f9cc24
freerdp-devel-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: f17e95fe6324ee133e72ab9d08ed750b3598eb9779ab063344db4efa4256acb9
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: afdd93a01c66022f75731eaf353ab3864e7a49f1050d278400b497f6f731ca4a
freerdp-server-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 5e9561883b2b25ad134616c8abd4c4eb7a92f06f0dbb5261d72c5fe0e9b03abf
freerdp-server-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 0aacc6e2be610bb842ea4a8b1fa3807b08bc039304e43d7a03aa24d98c709085
libwinpr-debuginfo-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 2c6dcb006a121d0bb563f1fbfdf45b21fbce29ca47d23b03d0048f50b418a431
libwinpr-devel-3.10.3-5.el10_1.2.aarch64.rpm SHA-256: 5859ca7948724c2a2a50fc756dd903035a4aa8f69361ac1c52d3172a81888c54

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
freerdp-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 5d9084f0fb3c30dae3ac0a1e3eb677ab4b99ca9133428b9fa489b82124d62f07
freerdp-debugsource-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 434893dc6d25d7f062d0581fb61b5d3b5e2a59ab7851ea54cf0ac48bd00de189
freerdp-devel-3.10.3-5.el10_1.2.s390x.rpm SHA-256: c0d8985e65e170739a6dd4fd2f8bdd2621766aa26743273f0eb0fd8c3e3ce3cc
freerdp-libs-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 596d3dac4a8b8db9850b2feaff9565f020d6aaf6c0cef8b63679570309b37f8b
freerdp-server-3.10.3-5.el10_1.2.s390x.rpm SHA-256: cdebd5cb2abbe0cf1598c3f1023a6df2e310cd022873eabfe69a20f1c9d23d59
freerdp-server-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: 44825e0859f0feac683998a26e57f524ba84d1115220dbb4b2681a11625933a4
libwinpr-debuginfo-3.10.3-5.el10_1.2.s390x.rpm SHA-256: a4d0fd26dca6d3fe71d1a899a70b288dc9f043cd5615e25fca55beb86c92025d
libwinpr-devel-3.10.3-5.el10_1.2.s390x.rpm SHA-256: c16dfb532ddd18e0fad1231ca2f5232fed19db16965294e0d682aae173e8f973

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。