Red Hat Product Errata RHSA-2026:58710 - Security Advisory
Issued:
2026-08-24
Updated:
2026-08-24

RHSA-2026:58710 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)
  • FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)
  • FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)
  • FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow (CVE-2026-68580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x

Fixes

  • BZ - 2503096 - CVE-2026-64624 FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files
  • BZ - 2509985 - CVE-2026-67299 FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message
  • BZ - 2510004 - CVE-2026-67289 FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection
  • BZ - 2510125 - CVE-2026-68580 FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
x86_64
freerdp-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 733605ec13d03e558ef8f280a7dd0620c82ef8f5d4f005807629c6ad87423171
freerdp-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: f902bd4aff71c5b35c31e79a984d56cf5b45430b2429dfa858774071f100964d
freerdp-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 1897ad064a56c1cd464923e4f2453fc37b637ec5667be0bd9da9eefd7707c49e
freerdp-debugsource-2.11.2-1.el9_4.10.i686.rpm SHA-256: b4e724bf16c09d5ca948915979fbedb174506b75ad866316876d60fe992dc30b
freerdp-debugsource-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: b202dfa8c781faedc3d1e0f7d95998f8db8a551c1dd774218972fdc936290003
freerdp-libs-2.11.2-1.el9_4.10.i686.rpm SHA-256: 99cd91d39c93aeddc3732047b1fb71f6b879618f72574887e42508364d785ef9
freerdp-libs-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 1f63174b66b6dee3d9ecd574b1d206125217d676d9334f2003bb79b06e1f438b
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: e2cf3fa0c3806891fc66e46322b5ecbcd411a6c7096c470eec3d5dfa24674c1d
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: ec32c6c0f05e3f0d7582682946e11f5cb7717bba3dc2319a3c15d93d76121782
libwinpr-2.11.2-1.el9_4.10.i686.rpm SHA-256: 8952e9698d5f59b2bc648593c8b6d8217987917483b30393581062c2311c94de
libwinpr-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: fc9a6c7ede160a91cbf4741c885783dc1c301b9ed6625b24c5f12b6d2116ff7e
libwinpr-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: bec8aa5c50795189e28ac7de8fe7116a3d1bf811ebc29636b51d2c21554c027f
libwinpr-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 3d9909865b399dd9299bcc9a116c738de6354cf18a88f9762610a83a50a8089f

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
ppc64le
freerdp-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 56ce2257c20793a35318ac4bed763e81f32e518ecdad1980ed3b6fb816090c2a
freerdp-debuginfo-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: b108ade429240563c9e4ddc9d5ec47f83697bb6c7bbb41d057b7e4c72589aba7
freerdp-debugsource-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: eb2455ef5f2c10fc0075dc0cfc83b7cc2081da83efe484fdbab2a84259381f28
freerdp-libs-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: ffef390fea3ba7d67f1a5ca68c55cc375f638af8f74928e7e6c335c627268ef4
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 38a41afd0507879a8458699a80ec89e9a74bbd790b66bbcf49cd7dfc9700249c
libwinpr-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 850dd349f094cb6bb912468bc8c288eb0a53b4059787df85640e7c297eba06fa
libwinpr-debuginfo-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 3137df3459937585cc445add35f1d83ecf03070d2bae4130816028cd83af89aa

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
x86_64
freerdp-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 733605ec13d03e558ef8f280a7dd0620c82ef8f5d4f005807629c6ad87423171
freerdp-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: f902bd4aff71c5b35c31e79a984d56cf5b45430b2429dfa858774071f100964d
freerdp-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 1897ad064a56c1cd464923e4f2453fc37b637ec5667be0bd9da9eefd7707c49e
freerdp-debugsource-2.11.2-1.el9_4.10.i686.rpm SHA-256: b4e724bf16c09d5ca948915979fbedb174506b75ad866316876d60fe992dc30b
freerdp-debugsource-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: b202dfa8c781faedc3d1e0f7d95998f8db8a551c1dd774218972fdc936290003
freerdp-libs-2.11.2-1.el9_4.10.i686.rpm SHA-256: 99cd91d39c93aeddc3732047b1fb71f6b879618f72574887e42508364d785ef9
freerdp-libs-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 1f63174b66b6dee3d9ecd574b1d206125217d676d9334f2003bb79b06e1f438b
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: e2cf3fa0c3806891fc66e46322b5ecbcd411a6c7096c470eec3d5dfa24674c1d
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: ec32c6c0f05e3f0d7582682946e11f5cb7717bba3dc2319a3c15d93d76121782
libwinpr-2.11.2-1.el9_4.10.i686.rpm SHA-256: 8952e9698d5f59b2bc648593c8b6d8217987917483b30393581062c2311c94de
libwinpr-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: fc9a6c7ede160a91cbf4741c885783dc1c301b9ed6625b24c5f12b6d2116ff7e
libwinpr-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: bec8aa5c50795189e28ac7de8fe7116a3d1bf811ebc29636b51d2c21554c027f
libwinpr-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 3d9909865b399dd9299bcc9a116c738de6354cf18a88f9762610a83a50a8089f

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
aarch64
freerdp-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: be130ec49a8d0e8db844bf7db2120057e0e6024e3cb96ea0ec9409274583d1f7
freerdp-debuginfo-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: 8ff49e0379475f6524cb30598131422c5bf9db396d3485a5d07cacb4df553505
freerdp-debugsource-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: fdfee4c28caa89b329573fece3add65fb77c0008bb479ecf91f8695ef0fd6840
freerdp-libs-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: f9ddc0d8d3334dd4c8afc324cd9dd688ee2ef7cbab48b8798c4b282f7ad939e1
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: 64f99211ff2d0b07713af1b0ee5e70c66fed93655d466ddc81799f75b44de855
libwinpr-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: ce95e1f2f5041c2f6a096f6cbc8e9aef479b7e4486e0ecc8bdbbdd2b3f651a40
libwinpr-debuginfo-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: fb5c1d660accb9bcd90688550f091470133ff9fb5f2749b9cc002b59c88a4310

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
s390x
freerdp-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 70352a7bf472b1e2f9b41a327e4119d900f3bc441ade5882d6dd9682c452742e
freerdp-debuginfo-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 46cea4a6f1696b06fde253d1964a87ccc2b3926ccf19ccf21c9013db4f6d785b
freerdp-debugsource-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 1ca945bc3ee1da243d7f3f4cb2d200c0fba8ccfe3b0e24b7795627a7a8a58f52
freerdp-libs-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 71c3720c4b1e988e4f6d33bd1803379e8a6ed80b59e0287db7b3a6f95ac07b9f
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 30c2973fbdedc4f23d4776afeafa848689ad6d7b682966b402cb78e31874c9c0
libwinpr-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 3a059e30cb864e1f377fb1d71bb6e2d3361a424b9bfbbc78afd499adbdd68834
libwinpr-debuginfo-2.11.2-1.el9_4.10.s390x.rpm SHA-256: d4b8e08577878d2a632be09cbf17df8d9c4272c519be18f88415d3b86b526318

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
x86_64
freerdp-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 733605ec13d03e558ef8f280a7dd0620c82ef8f5d4f005807629c6ad87423171
freerdp-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: f902bd4aff71c5b35c31e79a984d56cf5b45430b2429dfa858774071f100964d
freerdp-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 1897ad064a56c1cd464923e4f2453fc37b637ec5667be0bd9da9eefd7707c49e
freerdp-debugsource-2.11.2-1.el9_4.10.i686.rpm SHA-256: b4e724bf16c09d5ca948915979fbedb174506b75ad866316876d60fe992dc30b
freerdp-debugsource-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: b202dfa8c781faedc3d1e0f7d95998f8db8a551c1dd774218972fdc936290003
freerdp-libs-2.11.2-1.el9_4.10.i686.rpm SHA-256: 99cd91d39c93aeddc3732047b1fb71f6b879618f72574887e42508364d785ef9
freerdp-libs-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 1f63174b66b6dee3d9ecd574b1d206125217d676d9334f2003bb79b06e1f438b
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: e2cf3fa0c3806891fc66e46322b5ecbcd411a6c7096c470eec3d5dfa24674c1d
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: ec32c6c0f05e3f0d7582682946e11f5cb7717bba3dc2319a3c15d93d76121782
libwinpr-2.11.2-1.el9_4.10.i686.rpm SHA-256: 8952e9698d5f59b2bc648593c8b6d8217987917483b30393581062c2311c94de
libwinpr-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: fc9a6c7ede160a91cbf4741c885783dc1c301b9ed6625b24c5f12b6d2116ff7e
libwinpr-debuginfo-2.11.2-1.el9_4.10.i686.rpm SHA-256: bec8aa5c50795189e28ac7de8fe7116a3d1bf811ebc29636b51d2c21554c027f
libwinpr-debuginfo-2.11.2-1.el9_4.10.x86_64.rpm SHA-256: 3d9909865b399dd9299bcc9a116c738de6354cf18a88f9762610a83a50a8089f

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
aarch64
freerdp-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: be130ec49a8d0e8db844bf7db2120057e0e6024e3cb96ea0ec9409274583d1f7
freerdp-debuginfo-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: 8ff49e0379475f6524cb30598131422c5bf9db396d3485a5d07cacb4df553505
freerdp-debugsource-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: fdfee4c28caa89b329573fece3add65fb77c0008bb479ecf91f8695ef0fd6840
freerdp-libs-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: f9ddc0d8d3334dd4c8afc324cd9dd688ee2ef7cbab48b8798c4b282f7ad939e1
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: 64f99211ff2d0b07713af1b0ee5e70c66fed93655d466ddc81799f75b44de855
libwinpr-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: ce95e1f2f5041c2f6a096f6cbc8e9aef479b7e4486e0ecc8bdbbdd2b3f651a40
libwinpr-debuginfo-2.11.2-1.el9_4.10.aarch64.rpm SHA-256: fb5c1d660accb9bcd90688550f091470133ff9fb5f2749b9cc002b59c88a4310

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
ppc64le
freerdp-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 56ce2257c20793a35318ac4bed763e81f32e518ecdad1980ed3b6fb816090c2a
freerdp-debuginfo-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: b108ade429240563c9e4ddc9d5ec47f83697bb6c7bbb41d057b7e4c72589aba7
freerdp-debugsource-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: eb2455ef5f2c10fc0075dc0cfc83b7cc2081da83efe484fdbab2a84259381f28
freerdp-libs-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: ffef390fea3ba7d67f1a5ca68c55cc375f638af8f74928e7e6c335c627268ef4
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 38a41afd0507879a8458699a80ec89e9a74bbd790b66bbcf49cd7dfc9700249c
libwinpr-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 850dd349f094cb6bb912468bc8c288eb0a53b4059787df85640e7c297eba06fa
libwinpr-debuginfo-2.11.2-1.el9_4.10.ppc64le.rpm SHA-256: 3137df3459937585cc445add35f1d83ecf03070d2bae4130816028cd83af89aa

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.10.src.rpm SHA-256: 16f2f62d44fb6d516c094ac4a73c1396fb9b29431c80e1ffff8814ab4336dd9c
s390x
freerdp-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 70352a7bf472b1e2f9b41a327e4119d900f3bc441ade5882d6dd9682c452742e
freerdp-debuginfo-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 46cea4a6f1696b06fde253d1964a87ccc2b3926ccf19ccf21c9013db4f6d785b
freerdp-debugsource-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 1ca945bc3ee1da243d7f3f4cb2d200c0fba8ccfe3b0e24b7795627a7a8a58f52
freerdp-libs-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 71c3720c4b1e988e4f6d33bd1803379e8a6ed80b59e0287db7b3a6f95ac07b9f
freerdp-libs-debuginfo-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 30c2973fbdedc4f23d4776afeafa848689ad6d7b682966b402cb78e31874c9c0
libwinpr-2.11.2-1.el9_4.10.s390x.rpm SHA-256: 3a059e30cb864e1f377fb1d71bb6e2d3361a424b9bfbbc78afd499adbdd68834
libwinpr-debuginfo-2.11.2-1.el9_4.10.s390x.rpm SHA-256: d4b8e08577878d2a632be09cbf17df8d9c4272c519be18f88415d3b86b526318

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.