Red Hat Product Errata RHSA-2026:4437 - Security Advisory
Issued:
2026-03-12
Updated:
2026-03-12

RHSA-2026:4437 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  • freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x

Fixes

  • BZ - 2429645 - CVE-2026-22855 freerdp: FreeRDP heap-buffer-overflow
  • BZ - 2429649 - CVE-2026-22858 freerdp: FreeRDP global-buffer-overflow
  • BZ - 2429653 - CVE-2026-22859 freerdp: FreeRDP heap-buffer-overflow

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
x86_64
freerdp-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 2ec1bf6992e8542e817f2fe0643decb128632b505cee059f951882bbe905a261
freerdp-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 68dbdfd686b4a5b8e0d2e0a4f8fb8152a18d8c510a702039e2c36ce4ea187999
freerdp-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: dd209dc48a44c5d1ab6941db4731fe35f12811f5d85dedb0accf9a978c5a6356
freerdp-debugsource-2.4.1-6.el9_2.3.i686.rpm SHA-256: c24fb8b40daccadbc33033dabd2005d8f779dbfce0be0483295bb78747595ee0
freerdp-debugsource-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: ab9949246de2ceb2099a708495abbacdacc4f4580c863bc0e09ec093946b1c1d
freerdp-libs-2.4.1-6.el9_2.3.i686.rpm SHA-256: aa959b11674b36c75a89d761f47f4446292e9d6d18098974f59874e838507d01
freerdp-libs-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: c2977d670413cebeec3b5f4a7fd7b8693c41dbde0b0e3a45f1f85649aa47c67f
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 5a7c6cfb27e41bae227027886b2060bd1730e089a30c7c2dc7d692ea07af88fb
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 78e03f8b178e6c1ed364dbe78d66ea4195740a8926ac0cc7eabbf31138ee681c
libwinpr-2.4.1-6.el9_2.3.i686.rpm SHA-256: 53b8ad97384c0b3fcb43fac21336f1ef416297c2df8d3468b87c1c9f572bb420
libwinpr-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 66d79847ee4e568bb345488b83da56ca6d2be4e853d81ef732212f8ddefbf676
libwinpr-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 850d5da0b52af63d7535f395db2eb329e3544e63221620e34d9cbbb84b0eb7c2
libwinpr-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: d6b7f92b38a357c0ab1b9de1669857f6ac46d7fbcb5c7c92ab36e438ea6cdd84

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
ppc64le
freerdp-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: f45aac89cb92d083302ac465c98e613f20306a8da46dbedc614ffdc712fc8518
freerdp-debuginfo-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 344d81e2fd1a732c318263f3b0e0523012da7e1bf6626c5f02e0e0491d98931e
freerdp-debugsource-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 33a4ed93e58d53d9f2a71be8fc1e4772569f5b543e427ba8f07dd90ffc85031f
freerdp-libs-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 8f34290fae40753d6a9099d9b5b5145b336b38d11be9efe788379b88bcd9e1db
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 8e0e48b465e105b8c4ba9cd9fdc57b06ceef2077ed74e19c8855b2c715ae174d
libwinpr-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 5f17515bf80d9c58cddc6640a3b2499a53820dca8d3281e07676d80fd005ce32
libwinpr-debuginfo-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 37221c3134bab507fcdf04c916f4770e679c07c7485cf855d05538cd1de43c18

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
x86_64
freerdp-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 2ec1bf6992e8542e817f2fe0643decb128632b505cee059f951882bbe905a261
freerdp-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 68dbdfd686b4a5b8e0d2e0a4f8fb8152a18d8c510a702039e2c36ce4ea187999
freerdp-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: dd209dc48a44c5d1ab6941db4731fe35f12811f5d85dedb0accf9a978c5a6356
freerdp-debugsource-2.4.1-6.el9_2.3.i686.rpm SHA-256: c24fb8b40daccadbc33033dabd2005d8f779dbfce0be0483295bb78747595ee0
freerdp-debugsource-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: ab9949246de2ceb2099a708495abbacdacc4f4580c863bc0e09ec093946b1c1d
freerdp-libs-2.4.1-6.el9_2.3.i686.rpm SHA-256: aa959b11674b36c75a89d761f47f4446292e9d6d18098974f59874e838507d01
freerdp-libs-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: c2977d670413cebeec3b5f4a7fd7b8693c41dbde0b0e3a45f1f85649aa47c67f
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 5a7c6cfb27e41bae227027886b2060bd1730e089a30c7c2dc7d692ea07af88fb
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 78e03f8b178e6c1ed364dbe78d66ea4195740a8926ac0cc7eabbf31138ee681c
libwinpr-2.4.1-6.el9_2.3.i686.rpm SHA-256: 53b8ad97384c0b3fcb43fac21336f1ef416297c2df8d3468b87c1c9f572bb420
libwinpr-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 66d79847ee4e568bb345488b83da56ca6d2be4e853d81ef732212f8ddefbf676
libwinpr-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 850d5da0b52af63d7535f395db2eb329e3544e63221620e34d9cbbb84b0eb7c2
libwinpr-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: d6b7f92b38a357c0ab1b9de1669857f6ac46d7fbcb5c7c92ab36e438ea6cdd84

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
aarch64
freerdp-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 0fe68a7f5b54a279f5330efde5e6f8c1b350e7f4ce06f46498a5510475931c87
freerdp-debuginfo-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: f84339b8e4a59b2bc0e45f48cc03f088a20add7648bb8e905654f4fa534691ea
freerdp-debugsource-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 9cee57e4e55f92a4ab325fcda44698c99edec8599908d87b989f695a86f281e2
freerdp-libs-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: a14aaced69e7dcc782e364d301d31004706948d5f436d2298f8def0f45c79547
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 1997f1db94dae5bc9402c09ff3591684a3b825800d011cf10e1d801fe161b60a
libwinpr-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: cff9922674113452160ebbb6c13107ae9322c29a38c6de711e1902ea1527a7ab
libwinpr-debuginfo-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 7657dbf2ae60ca41f93a9cf7be1ba0178f03d88027443731c654b990f13e3fc8

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
s390x
freerdp-2.4.1-6.el9_2.3.s390x.rpm SHA-256: bdf7c8cf3a97cec9114bba12e833e0f6dce8e466b8ee9e8a16673bea88fb3311
freerdp-debuginfo-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 504bc7a4797b09fa68a7c301743394890c6ae985bc67a2e221301879f51ee293
freerdp-debugsource-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 1b48a820723a2919c6d93fd35d87dce9ba705650e5c29193086519463eb3506e
freerdp-libs-2.4.1-6.el9_2.3.s390x.rpm SHA-256: f84539182807ad256c47a48ab89f7a0a51934a6770f6e526d63fed8d3c2c4f27
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 1f3e8681a232df95414fbf21989b10c497100cf87b82101abcd4a920ce87b163
libwinpr-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 15f2eb5ff46fd025c6b84c69087b75c5c3b34da9c1042ede0be5766232972de7
libwinpr-debuginfo-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 33018f09eab66f35ef7de386b24cf516dbb64d79717d9a04096bfa4181bf79b9

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
x86_64
freerdp-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 2ec1bf6992e8542e817f2fe0643decb128632b505cee059f951882bbe905a261
freerdp-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 68dbdfd686b4a5b8e0d2e0a4f8fb8152a18d8c510a702039e2c36ce4ea187999
freerdp-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: dd209dc48a44c5d1ab6941db4731fe35f12811f5d85dedb0accf9a978c5a6356
freerdp-debugsource-2.4.1-6.el9_2.3.i686.rpm SHA-256: c24fb8b40daccadbc33033dabd2005d8f779dbfce0be0483295bb78747595ee0
freerdp-debugsource-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: ab9949246de2ceb2099a708495abbacdacc4f4580c863bc0e09ec093946b1c1d
freerdp-libs-2.4.1-6.el9_2.3.i686.rpm SHA-256: aa959b11674b36c75a89d761f47f4446292e9d6d18098974f59874e838507d01
freerdp-libs-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: c2977d670413cebeec3b5f4a7fd7b8693c41dbde0b0e3a45f1f85649aa47c67f
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 5a7c6cfb27e41bae227027886b2060bd1730e089a30c7c2dc7d692ea07af88fb
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 78e03f8b178e6c1ed364dbe78d66ea4195740a8926ac0cc7eabbf31138ee681c
libwinpr-2.4.1-6.el9_2.3.i686.rpm SHA-256: 53b8ad97384c0b3fcb43fac21336f1ef416297c2df8d3468b87c1c9f572bb420
libwinpr-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: 66d79847ee4e568bb345488b83da56ca6d2be4e853d81ef732212f8ddefbf676
libwinpr-debuginfo-2.4.1-6.el9_2.3.i686.rpm SHA-256: 850d5da0b52af63d7535f395db2eb329e3544e63221620e34d9cbbb84b0eb7c2
libwinpr-debuginfo-2.4.1-6.el9_2.3.x86_64.rpm SHA-256: d6b7f92b38a357c0ab1b9de1669857f6ac46d7fbcb5c7c92ab36e438ea6cdd84

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
aarch64
freerdp-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 0fe68a7f5b54a279f5330efde5e6f8c1b350e7f4ce06f46498a5510475931c87
freerdp-debuginfo-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: f84339b8e4a59b2bc0e45f48cc03f088a20add7648bb8e905654f4fa534691ea
freerdp-debugsource-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 9cee57e4e55f92a4ab325fcda44698c99edec8599908d87b989f695a86f281e2
freerdp-libs-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: a14aaced69e7dcc782e364d301d31004706948d5f436d2298f8def0f45c79547
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 1997f1db94dae5bc9402c09ff3591684a3b825800d011cf10e1d801fe161b60a
libwinpr-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: cff9922674113452160ebbb6c13107ae9322c29a38c6de711e1902ea1527a7ab
libwinpr-debuginfo-2.4.1-6.el9_2.3.aarch64.rpm SHA-256: 7657dbf2ae60ca41f93a9cf7be1ba0178f03d88027443731c654b990f13e3fc8

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
ppc64le
freerdp-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: f45aac89cb92d083302ac465c98e613f20306a8da46dbedc614ffdc712fc8518
freerdp-debuginfo-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 344d81e2fd1a732c318263f3b0e0523012da7e1bf6626c5f02e0e0491d98931e
freerdp-debugsource-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 33a4ed93e58d53d9f2a71be8fc1e4772569f5b543e427ba8f07dd90ffc85031f
freerdp-libs-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 8f34290fae40753d6a9099d9b5b5145b336b38d11be9efe788379b88bcd9e1db
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 8e0e48b465e105b8c4ba9cd9fdc57b06ceef2077ed74e19c8855b2c715ae174d
libwinpr-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 5f17515bf80d9c58cddc6640a3b2499a53820dca8d3281e07676d80fd005ce32
libwinpr-debuginfo-2.4.1-6.el9_2.3.ppc64le.rpm SHA-256: 37221c3134bab507fcdf04c916f4770e679c07c7485cf855d05538cd1de43c18

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.3.src.rpm SHA-256: 217adf7fbb00a384778b8cce56e45bdfcee876a81aeb180fb018834d6192cf06
s390x
freerdp-2.4.1-6.el9_2.3.s390x.rpm SHA-256: bdf7c8cf3a97cec9114bba12e833e0f6dce8e466b8ee9e8a16673bea88fb3311
freerdp-debuginfo-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 504bc7a4797b09fa68a7c301743394890c6ae985bc67a2e221301879f51ee293
freerdp-debugsource-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 1b48a820723a2919c6d93fd35d87dce9ba705650e5c29193086519463eb3506e
freerdp-libs-2.4.1-6.el9_2.3.s390x.rpm SHA-256: f84539182807ad256c47a48ab89f7a0a51934a6770f6e526d63fed8d3c2c4f27
freerdp-libs-debuginfo-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 1f3e8681a232df95414fbf21989b10c497100cf87b82101abcd4a920ce87b163
libwinpr-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 15f2eb5ff46fd025c6b84c69087b75c5c3b34da9c1042ede0be5766232972de7
libwinpr-debuginfo-2.4.1-6.el9_2.3.s390x.rpm SHA-256: 33018f09eab66f35ef7de386b24cf516dbb64d79717d9a04096bfa4181bf79b9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.