Red Hat Product Errata RHSA-2026:4489 - Security Advisory
Issued:
2026-03-12
Updated:
2026-03-12

RHSA-2026:4489 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  • freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  • freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

  • BZ - 2429645 - CVE-2026-22855 freerdp: FreeRDP heap-buffer-overflow
  • BZ - 2429649 - CVE-2026-22858 freerdp: FreeRDP global-buffer-overflow
  • BZ - 2429653 - CVE-2026-22859 freerdp: FreeRDP heap-buffer-overflow

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0

SRPM
freerdp-2.4.1-3.el9_0.1.src.rpm SHA-256: 38e1a5eb6878d198a1f0ce2783597af8307e1a525a1e3c8a6f1f29c6f448eff9
ppc64le
freerdp-2.4.1-3.el9_0.1.ppc64le.rpm SHA-256: beac3eac203f7684ec892b7a0c35f4fb7a9316f634e30f3427b92ef289fd7d0c
freerdp-debuginfo-2.4.1-3.el9_0.1.ppc64le.rpm SHA-256: ea997d50323105591f1a960f7ae0b5410e7d2763cacbc27bff644792002b52a1
freerdp-debugsource-2.4.1-3.el9_0.1.ppc64le.rpm SHA-256: 79468f78326f75fa13cfb0ae039f63346e3f5ed2a3bdbec01cefef289657ac22
freerdp-libs-2.4.1-3.el9_0.1.ppc64le.rpm SHA-256: f8b233bb7b8031e2652295d01076d506a56614ce0040d9a92f3cb061faccff4f
freerdp-libs-debuginfo-2.4.1-3.el9_0.1.ppc64le.rpm SHA-256: fb3f2cf93f2db97fc2ca296c42141e2967fe1bc758c8a5e61442a7301e7902fc
libwinpr-2.4.1-3.el9_0.1.ppc64le.rpm SHA-256: bc5718d8377bf56a5a29df08e2d3b8ffe9522aab672a7079a6a46b827abef517
libwinpr-debuginfo-2.4.1-3.el9_0.1.ppc64le.rpm SHA-256: 462ae9a6f014cb46d95787b6fd9b40e812e0218fe1f2c5218b55ac390f2f1790

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0

SRPM
freerdp-2.4.1-3.el9_0.1.src.rpm SHA-256: 38e1a5eb6878d198a1f0ce2783597af8307e1a525a1e3c8a6f1f29c6f448eff9
x86_64
freerdp-2.4.1-3.el9_0.1.x86_64.rpm SHA-256: e446b64c56502fb73cf405a19f2d2cdad9da55ef61c9feaa7a4d1c882088dc00
freerdp-debuginfo-2.4.1-3.el9_0.1.i686.rpm SHA-256: ca4a67377037a1843b1fd76189c74ca0bfd809c5941067ba0442da24424f5811
freerdp-debuginfo-2.4.1-3.el9_0.1.x86_64.rpm SHA-256: eaf7adfd42c5268cdc7abf9df4baf5457c169f6944f45025ea28bebf8c409e24
freerdp-debugsource-2.4.1-3.el9_0.1.i686.rpm SHA-256: 7b1a8424561327088857fc18324cc9188952230ca45ff0480ddd4e41814200b0
freerdp-debugsource-2.4.1-3.el9_0.1.x86_64.rpm SHA-256: 7823b2b111cc3464cf5ef36dfaed49f90151a6895f74908fe4d5dd2c455e2f2e
freerdp-libs-2.4.1-3.el9_0.1.i686.rpm SHA-256: 418c0530719650a21bca5dc3beefc63b6c414c3261ba76dabcf92aef551c764e
freerdp-libs-2.4.1-3.el9_0.1.x86_64.rpm SHA-256: b43a38c65df35b0e6833bac32ada16991d1e9c599c6a0117e6f71906aa05bc41
freerdp-libs-debuginfo-2.4.1-3.el9_0.1.i686.rpm SHA-256: d3c7034373c4d2850c6953f9ca6956a517b70356677e1965461816d827bbbb62
freerdp-libs-debuginfo-2.4.1-3.el9_0.1.x86_64.rpm SHA-256: ba2e65faec1c16c476afe3a516124af481ab042319e844e77dfd53381a1529df
libwinpr-2.4.1-3.el9_0.1.i686.rpm SHA-256: 7f9369eea30de6f6a3a43435e26a982dd8e6ebb0f9ac180532ffa0e52fe97748
libwinpr-2.4.1-3.el9_0.1.x86_64.rpm SHA-256: 6df1d1c5a0f6f00b0c8d6eb2fdf6592ddad3f66919e0149b99d0d68445447b70
libwinpr-debuginfo-2.4.1-3.el9_0.1.i686.rpm SHA-256: fa9fe3ecbb9d38ff56d83517c0b6cc2a2ae701e433aaf99d0b20b1a0ba8e9972
libwinpr-debuginfo-2.4.1-3.el9_0.1.x86_64.rpm SHA-256: 770386804a948a15fb25817cf37efb9f724668a797eb1613c7f60dff728075b8

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0

SRPM
freerdp-2.4.1-3.el9_0.1.src.rpm SHA-256: 38e1a5eb6878d198a1f0ce2783597af8307e1a525a1e3c8a6f1f29c6f448eff9
aarch64
freerdp-2.4.1-3.el9_0.1.aarch64.rpm SHA-256: bb075457ae3d75673f29a09d66ba7175114d5f889fa7ffe1d138fcfab2845c7d
freerdp-debuginfo-2.4.1-3.el9_0.1.aarch64.rpm SHA-256: 1bd4273c3a8174f8badcfceda0e7533a285101ad0e6b4d5713643a5435c54712
freerdp-debugsource-2.4.1-3.el9_0.1.aarch64.rpm SHA-256: dbd430bb9bfe36e45ed8186beab6e8b2a74dd8f9209f977a78a75082ea6fae15
freerdp-libs-2.4.1-3.el9_0.1.aarch64.rpm SHA-256: e608cca14e834001004c81c8f38ba3028d411704c37cb911545269c1a02b99cb
freerdp-libs-debuginfo-2.4.1-3.el9_0.1.aarch64.rpm SHA-256: f5a38e7685023c43484212a0a6f8a70012b63c1323f88e55f1c2e61cd11dba70
libwinpr-2.4.1-3.el9_0.1.aarch64.rpm SHA-256: 2fe41befe06c7073a1ffc1bda65c427843c9c23b67191deadebf0d600f38ebe0
libwinpr-debuginfo-2.4.1-3.el9_0.1.aarch64.rpm SHA-256: 2992f98e6961b2da9803de787edaf707bddeb8d1dd1c413253f6961dcd89426d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0

SRPM
freerdp-2.4.1-3.el9_0.1.src.rpm SHA-256: 38e1a5eb6878d198a1f0ce2783597af8307e1a525a1e3c8a6f1f29c6f448eff9
s390x
freerdp-2.4.1-3.el9_0.1.s390x.rpm SHA-256: 52f587a975ae7219324e27c42fad8181a0b6457b4636f2c94e1f4f85b1a9432b
freerdp-debuginfo-2.4.1-3.el9_0.1.s390x.rpm SHA-256: e7235ca3462e078a1fcef7a8d9998e160e46e8e3f0ca921d28655dcb8577b8b6
freerdp-debugsource-2.4.1-3.el9_0.1.s390x.rpm SHA-256: 035930145f09822ddcf25b7e18e09a35fa5c163c00c6d44165af45ec269b92ab
freerdp-libs-2.4.1-3.el9_0.1.s390x.rpm SHA-256: 952179dba7f0ed87cbbb87e54a2401f0fa0b1b9579f11b845974f9bea8ddc9a4
freerdp-libs-debuginfo-2.4.1-3.el9_0.1.s390x.rpm SHA-256: 0db93685c42d0bedc151f2781e2a475a00be93506d9fa2521bb3b765672a5be3
libwinpr-2.4.1-3.el9_0.1.s390x.rpm SHA-256: 8b701cc56e9b49b34f76b05cdfd322ac07fb68cd3c690b36b5380541e361041e
libwinpr-debuginfo-2.4.1-3.el9_0.1.s390x.rpm SHA-256: d19806f00da8bbb38dd5ed78334c496d0728ad034aa9a020f0ee2022492ff74a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.