Red Hat Product Errata RHSA-2026:6396 - Security Advisory
Issued:
2026-04-01
Updated:
2026-04-01

RHSA-2026:6396 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  • freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x

Fixes

  • BZ - 2442959 - CVE-2026-26965 freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path
  • BZ - 2443132 - CVE-2026-26955 freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
x86_64
freerdp-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 8d2e28b73a553e645767c67d085ee44fd0f5890a9bffd5027e6ba686d16ec6c7
freerdp-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: ad7ae789cab912e3d3bcdd9c8bbbbbb8e8165a14767c0241282bb274ee6b7952
freerdp-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 3f2d6e6fd9fec5bd27256d9e1a02b210ef011d6f3ddfb4cdf73a6365e2fb1408
freerdp-debugsource-2.4.1-6.el9_2.4.i686.rpm SHA-256: f8150b53c2b2ff17f41fe5de5ae3d7c772f6c59eec3dee896dac672e315e4ff1
freerdp-debugsource-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: e147cf3436f01616c21aa31616d2e7ba41a11f3adf24fbe83db374f3011e0309
freerdp-libs-2.4.1-6.el9_2.4.i686.rpm SHA-256: 1da147095ec8e584c0959f24f2592e64ee43d6809191bf9f7f10ea383f07b9c4
freerdp-libs-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 65a000d811b65ee1c249aed41a281ba6ed6e609ce8a447d0bdc45a3cf4113cbe
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: 5682f5e8b4bbd4362f4e287e067fb9b6acf2b4676297fd7d5a25655639abde59
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 07a2024564b5e440f641ac56669c97addf702050f56936d895d08c2ccb329a87
libwinpr-2.4.1-6.el9_2.4.i686.rpm SHA-256: b296d909bb3a5c493fa8a0002d48f32035f09012e3e9fe0badc8e9cefe8e8043
libwinpr-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 9a21c9051e641dd3b230b79120a91531fd67910e7abfac91030d9d72fe9df3ad
libwinpr-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: 2516481d33d979d7b8f119600bf4410c2d30fea583dcb2093f156b48623e4cf7
libwinpr-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 3c48f695bd05fa7d83ba9281f3c2fe75b903948b01551fd32a2ac493958d5bd8

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
ppc64le
freerdp-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 1c382df0ae37de54581ebca4d9501e0b4a669eff64b8b7d11e65d46f2d4b908a
freerdp-debuginfo-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: ba5a7155b12821ed230f91bc93acc7d24e928461bdd4362fb97b39eb483a7b56
freerdp-debugsource-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: b5977d45b3147a040514c4ea885db2d151219c0fe4e365386f823203c3d22a2c
freerdp-libs-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 96165e6981e190d252e6629888ff5d45d148ba5b613625c429fe79f70ef4afc6
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 32872cdda9f3a1f5db9233463bddea9576e9eaa4b9bf5d8a7e8e9e02a28c3eb3
libwinpr-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 7b7e5bcbe29b64b673ce53694f62fa699f9485f15d3a8aea78ebf6a80bbbefb2
libwinpr-debuginfo-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 08969143a44391bf9fc04e126070a2bdd62b21e61f59ca17573d073b839675c0

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
x86_64
freerdp-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 8d2e28b73a553e645767c67d085ee44fd0f5890a9bffd5027e6ba686d16ec6c7
freerdp-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: ad7ae789cab912e3d3bcdd9c8bbbbbb8e8165a14767c0241282bb274ee6b7952
freerdp-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 3f2d6e6fd9fec5bd27256d9e1a02b210ef011d6f3ddfb4cdf73a6365e2fb1408
freerdp-debugsource-2.4.1-6.el9_2.4.i686.rpm SHA-256: f8150b53c2b2ff17f41fe5de5ae3d7c772f6c59eec3dee896dac672e315e4ff1
freerdp-debugsource-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: e147cf3436f01616c21aa31616d2e7ba41a11f3adf24fbe83db374f3011e0309
freerdp-libs-2.4.1-6.el9_2.4.i686.rpm SHA-256: 1da147095ec8e584c0959f24f2592e64ee43d6809191bf9f7f10ea383f07b9c4
freerdp-libs-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 65a000d811b65ee1c249aed41a281ba6ed6e609ce8a447d0bdc45a3cf4113cbe
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: 5682f5e8b4bbd4362f4e287e067fb9b6acf2b4676297fd7d5a25655639abde59
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 07a2024564b5e440f641ac56669c97addf702050f56936d895d08c2ccb329a87
libwinpr-2.4.1-6.el9_2.4.i686.rpm SHA-256: b296d909bb3a5c493fa8a0002d48f32035f09012e3e9fe0badc8e9cefe8e8043
libwinpr-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 9a21c9051e641dd3b230b79120a91531fd67910e7abfac91030d9d72fe9df3ad
libwinpr-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: 2516481d33d979d7b8f119600bf4410c2d30fea583dcb2093f156b48623e4cf7
libwinpr-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 3c48f695bd05fa7d83ba9281f3c2fe75b903948b01551fd32a2ac493958d5bd8

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
aarch64
freerdp-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 37a7f77b74894220865321a4a85149626979ea6a3bedefef3fdc85212df9f374
freerdp-debuginfo-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 08199064f4d100c9e9b3e8cba3298805a3714577a30bba98249fc2a887eb6102
freerdp-debugsource-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 1373dcfcbbca6d300368b16c5fb3e731edf3065f97a0f4f76051faacb50c3051
freerdp-libs-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 9d62345126cd731548577a9303d3a417e4b8c5c72e0749a95a469755d868ef32
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: e9c4121a31eb034820944a839c16c9848f270d1fedf3b3378bd08a33a45f8e82
libwinpr-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 035a553e19f18041c5ea7f555bfd6c3d82a3f784facfa7b21b233399ca090c35
libwinpr-debuginfo-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 80e105e2cb79c0bc7199ee53ff43e4aceb156adf5cf2abc7a523910f32c15b68

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
s390x
freerdp-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 10a802cb1bb834de3629b5b147bc73de8da83cd6febfdd50fdfc9c87620d94e1
freerdp-debuginfo-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 829b0ae62507a7d020fdeaa984d51ecc39ca2c48a42494c9bea35cebf8ea5770
freerdp-debugsource-2.4.1-6.el9_2.4.s390x.rpm SHA-256: f1f83a37c5166c8467d3477c45decabdabe15c8abc8f4ce419e3d6100f1032fa
freerdp-libs-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 853b266c10e566719fa747e3282cb1787e634ecdccf41cf6ad66ca6d5dda4b14
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 6cfe15b8158740b22921b4c08174f9993e1def87bd02f4ddad22a486b6ee02ba
libwinpr-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 357cb92e08bfd7a4619a38356eaa036bbb68a1bad226a8409d299448d3115a46
libwinpr-debuginfo-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 362ac129ffa756f942452249606d063eacb497974236174cd201d9d42f9acc8a

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
x86_64
freerdp-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 8d2e28b73a553e645767c67d085ee44fd0f5890a9bffd5027e6ba686d16ec6c7
freerdp-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: ad7ae789cab912e3d3bcdd9c8bbbbbb8e8165a14767c0241282bb274ee6b7952
freerdp-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 3f2d6e6fd9fec5bd27256d9e1a02b210ef011d6f3ddfb4cdf73a6365e2fb1408
freerdp-debugsource-2.4.1-6.el9_2.4.i686.rpm SHA-256: f8150b53c2b2ff17f41fe5de5ae3d7c772f6c59eec3dee896dac672e315e4ff1
freerdp-debugsource-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: e147cf3436f01616c21aa31616d2e7ba41a11f3adf24fbe83db374f3011e0309
freerdp-libs-2.4.1-6.el9_2.4.i686.rpm SHA-256: 1da147095ec8e584c0959f24f2592e64ee43d6809191bf9f7f10ea383f07b9c4
freerdp-libs-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 65a000d811b65ee1c249aed41a281ba6ed6e609ce8a447d0bdc45a3cf4113cbe
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: 5682f5e8b4bbd4362f4e287e067fb9b6acf2b4676297fd7d5a25655639abde59
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 07a2024564b5e440f641ac56669c97addf702050f56936d895d08c2ccb329a87
libwinpr-2.4.1-6.el9_2.4.i686.rpm SHA-256: b296d909bb3a5c493fa8a0002d48f32035f09012e3e9fe0badc8e9cefe8e8043
libwinpr-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 9a21c9051e641dd3b230b79120a91531fd67910e7abfac91030d9d72fe9df3ad
libwinpr-debuginfo-2.4.1-6.el9_2.4.i686.rpm SHA-256: 2516481d33d979d7b8f119600bf4410c2d30fea583dcb2093f156b48623e4cf7
libwinpr-debuginfo-2.4.1-6.el9_2.4.x86_64.rpm SHA-256: 3c48f695bd05fa7d83ba9281f3c2fe75b903948b01551fd32a2ac493958d5bd8

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
aarch64
freerdp-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 37a7f77b74894220865321a4a85149626979ea6a3bedefef3fdc85212df9f374
freerdp-debuginfo-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 08199064f4d100c9e9b3e8cba3298805a3714577a30bba98249fc2a887eb6102
freerdp-debugsource-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 1373dcfcbbca6d300368b16c5fb3e731edf3065f97a0f4f76051faacb50c3051
freerdp-libs-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 9d62345126cd731548577a9303d3a417e4b8c5c72e0749a95a469755d868ef32
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: e9c4121a31eb034820944a839c16c9848f270d1fedf3b3378bd08a33a45f8e82
libwinpr-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 035a553e19f18041c5ea7f555bfd6c3d82a3f784facfa7b21b233399ca090c35
libwinpr-debuginfo-2.4.1-6.el9_2.4.aarch64.rpm SHA-256: 80e105e2cb79c0bc7199ee53ff43e4aceb156adf5cf2abc7a523910f32c15b68

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
ppc64le
freerdp-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 1c382df0ae37de54581ebca4d9501e0b4a669eff64b8b7d11e65d46f2d4b908a
freerdp-debuginfo-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: ba5a7155b12821ed230f91bc93acc7d24e928461bdd4362fb97b39eb483a7b56
freerdp-debugsource-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: b5977d45b3147a040514c4ea885db2d151219c0fe4e365386f823203c3d22a2c
freerdp-libs-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 96165e6981e190d252e6629888ff5d45d148ba5b613625c429fe79f70ef4afc6
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 32872cdda9f3a1f5db9233463bddea9576e9eaa4b9bf5d8a7e8e9e02a28c3eb3
libwinpr-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 7b7e5bcbe29b64b673ce53694f62fa699f9485f15d3a8aea78ebf6a80bbbefb2
libwinpr-debuginfo-2.4.1-6.el9_2.4.ppc64le.rpm SHA-256: 08969143a44391bf9fc04e126070a2bdd62b21e61f59ca17573d073b839675c0

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.4.src.rpm SHA-256: 6ab4ea7b73bd3e13474462a6a31b5676450daa3454ae64e7e261c40a6c1d54e3
s390x
freerdp-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 10a802cb1bb834de3629b5b147bc73de8da83cd6febfdd50fdfc9c87620d94e1
freerdp-debuginfo-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 829b0ae62507a7d020fdeaa984d51ecc39ca2c48a42494c9bea35cebf8ea5770
freerdp-debugsource-2.4.1-6.el9_2.4.s390x.rpm SHA-256: f1f83a37c5166c8467d3477c45decabdabe15c8abc8f4ce419e3d6100f1032fa
freerdp-libs-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 853b266c10e566719fa747e3282cb1787e634ecdccf41cf6ad66ca6d5dda4b14
freerdp-libs-debuginfo-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 6cfe15b8158740b22921b4c08174f9993e1def87bd02f4ddad22a486b6ee02ba
libwinpr-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 357cb92e08bfd7a4619a38356eaa036bbb68a1bad226a8409d299448d3115a46
libwinpr-debuginfo-2.4.1-6.el9_2.4.s390x.rpm SHA-256: 362ac129ffa756f942452249606d063eacb497974236174cd201d9d42f9acc8a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.