Red Hat Product Errata RHSA-2026:6665 - Security Advisory
Issued:
2026-04-06
Updated:
2026-04-06

RHSA-2026:6665 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  • freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

  • BZ - 2442959 - CVE-2026-26965 freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path
  • BZ - 2443132 - CVE-2026-26955 freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
freerdp-2.2.0-7.el8_6.3.src.rpm SHA-256: f3ce65837929c6b3717c19ffd736cc2929b8dc01faf09de8e7c963e51d0cd104
x86_64
freerdp-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 913e5ec1974bb9c9ac6bb4003244873be2717f348052b13ac932f0374bc85c28
freerdp-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 381617fd1097e0d234c31be2a87c2e495e09c4746e47d80de8edaa722d8c6a9f
freerdp-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 78dfee635dde09875ebef11de10576c0d36574f2bbc72045f59d87b35c7efdaa
freerdp-debugsource-2.2.0-7.el8_6.3.i686.rpm SHA-256: ad6c2c3049e7ad52b41929d53ae94559e5ad62bdbca6a99fae948d823aeb8afd
freerdp-debugsource-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 0f4b7835ed193a3b123ae98da005e64b816f50e54c8155d730a6e58a79a9abd9
freerdp-libs-2.2.0-7.el8_6.3.i686.rpm SHA-256: b184e9e7b0aa0b4fb7b790322761b5afe39242e4a18485ca6753e322feb34d2e
freerdp-libs-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: d3673747b042cbed61d2abf9311d222d241288031cd369e14b2363147ad0ecc9
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 2f1d0f000ea0f7c007a87b7d87ca06b52b9e9fe14c33a20ad3a3e176a3e11ab6
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 478fb914da18c8638ff2e15c5d42d2095e921b55d26dfa754f69350bc16c2c19
libwinpr-2.2.0-7.el8_6.3.i686.rpm SHA-256: 8f10cc6e7d6868b33a3799a557ec52200cc3b222496b75f08dcfceef19b8a226
libwinpr-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: e94a393b64ef8c4b3aaa7e093f304a723cab4de1bfb632aa2809d8e44632e0ca
libwinpr-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 648f240b1f4fdbbc1aa75bdfdd769f4447c64dca40b6f19e0982cd0dbc642ecc
libwinpr-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: ecec35973ca8a7b7478666bc770b33a617914767f52f503cd74a792276e3ccbc
libwinpr-devel-2.2.0-7.el8_6.3.i686.rpm SHA-256: d59771bf2dbd1ea853e8928389cd9713330a7099b0a2afc6ae048ecc03ca6b56
libwinpr-devel-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 500cba5ff1e6affa1e9d08e68e5843afea70c2e85455ebec4f560b8b50d39a41

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
freerdp-2.2.0-7.el8_6.3.src.rpm SHA-256: f3ce65837929c6b3717c19ffd736cc2929b8dc01faf09de8e7c963e51d0cd104
x86_64
freerdp-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 913e5ec1974bb9c9ac6bb4003244873be2717f348052b13ac932f0374bc85c28
freerdp-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 381617fd1097e0d234c31be2a87c2e495e09c4746e47d80de8edaa722d8c6a9f
freerdp-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 78dfee635dde09875ebef11de10576c0d36574f2bbc72045f59d87b35c7efdaa
freerdp-debugsource-2.2.0-7.el8_6.3.i686.rpm SHA-256: ad6c2c3049e7ad52b41929d53ae94559e5ad62bdbca6a99fae948d823aeb8afd
freerdp-debugsource-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 0f4b7835ed193a3b123ae98da005e64b816f50e54c8155d730a6e58a79a9abd9
freerdp-libs-2.2.0-7.el8_6.3.i686.rpm SHA-256: b184e9e7b0aa0b4fb7b790322761b5afe39242e4a18485ca6753e322feb34d2e
freerdp-libs-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: d3673747b042cbed61d2abf9311d222d241288031cd369e14b2363147ad0ecc9
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 2f1d0f000ea0f7c007a87b7d87ca06b52b9e9fe14c33a20ad3a3e176a3e11ab6
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 478fb914da18c8638ff2e15c5d42d2095e921b55d26dfa754f69350bc16c2c19
libwinpr-2.2.0-7.el8_6.3.i686.rpm SHA-256: 8f10cc6e7d6868b33a3799a557ec52200cc3b222496b75f08dcfceef19b8a226
libwinpr-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: e94a393b64ef8c4b3aaa7e093f304a723cab4de1bfb632aa2809d8e44632e0ca
libwinpr-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 648f240b1f4fdbbc1aa75bdfdd769f4447c64dca40b6f19e0982cd0dbc642ecc
libwinpr-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: ecec35973ca8a7b7478666bc770b33a617914767f52f503cd74a792276e3ccbc
libwinpr-devel-2.2.0-7.el8_6.3.i686.rpm SHA-256: d59771bf2dbd1ea853e8928389cd9713330a7099b0a2afc6ae048ecc03ca6b56
libwinpr-devel-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 500cba5ff1e6affa1e9d08e68e5843afea70c2e85455ebec4f560b8b50d39a41

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
freerdp-2.2.0-7.el8_6.3.src.rpm SHA-256: f3ce65837929c6b3717c19ffd736cc2929b8dc01faf09de8e7c963e51d0cd104
x86_64
freerdp-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 913e5ec1974bb9c9ac6bb4003244873be2717f348052b13ac932f0374bc85c28
freerdp-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 381617fd1097e0d234c31be2a87c2e495e09c4746e47d80de8edaa722d8c6a9f
freerdp-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 78dfee635dde09875ebef11de10576c0d36574f2bbc72045f59d87b35c7efdaa
freerdp-debugsource-2.2.0-7.el8_6.3.i686.rpm SHA-256: ad6c2c3049e7ad52b41929d53ae94559e5ad62bdbca6a99fae948d823aeb8afd
freerdp-debugsource-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 0f4b7835ed193a3b123ae98da005e64b816f50e54c8155d730a6e58a79a9abd9
freerdp-libs-2.2.0-7.el8_6.3.i686.rpm SHA-256: b184e9e7b0aa0b4fb7b790322761b5afe39242e4a18485ca6753e322feb34d2e
freerdp-libs-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: d3673747b042cbed61d2abf9311d222d241288031cd369e14b2363147ad0ecc9
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 2f1d0f000ea0f7c007a87b7d87ca06b52b9e9fe14c33a20ad3a3e176a3e11ab6
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 478fb914da18c8638ff2e15c5d42d2095e921b55d26dfa754f69350bc16c2c19
libwinpr-2.2.0-7.el8_6.3.i686.rpm SHA-256: 8f10cc6e7d6868b33a3799a557ec52200cc3b222496b75f08dcfceef19b8a226
libwinpr-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: e94a393b64ef8c4b3aaa7e093f304a723cab4de1bfb632aa2809d8e44632e0ca
libwinpr-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 648f240b1f4fdbbc1aa75bdfdd769f4447c64dca40b6f19e0982cd0dbc642ecc
libwinpr-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: ecec35973ca8a7b7478666bc770b33a617914767f52f503cd74a792276e3ccbc
libwinpr-devel-2.2.0-7.el8_6.3.i686.rpm SHA-256: d59771bf2dbd1ea853e8928389cd9713330a7099b0a2afc6ae048ecc03ca6b56
libwinpr-devel-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 500cba5ff1e6affa1e9d08e68e5843afea70c2e85455ebec4f560b8b50d39a41

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
freerdp-2.2.0-7.el8_6.3.src.rpm SHA-256: f3ce65837929c6b3717c19ffd736cc2929b8dc01faf09de8e7c963e51d0cd104
ppc64le
freerdp-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: 1832dff329e7b8ad395d31a696c81db0ee5426d604e3bd634610a68b98930ccd
freerdp-debuginfo-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: cbe8941ffd8dbc8454809e187fecfc6cae783b22c22a5c18d15096ea005bdd15
freerdp-debugsource-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: a6ed24a35854d2f4288f9d26930c2b6ae69a004b20b4ebb8e301719a389376ca
freerdp-libs-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: 0478e17db2fc49bcfa156aa8d8314e69c451b8079f3a49d38ae02126848fd9a1
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: a8b623ffc8225e7d621c70a6ba0aca1a28ec7d3eebf3efaed12eb13e190867a3
libwinpr-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: 6521c27c6b8f6b7ac823ddcae22e3ab6451f71fe3e302c63ced1c2b339b25197
libwinpr-debuginfo-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: b20d826ce8a8462861d54ba2877c6c4991924a7dcca06d6198b61683263d4e4f
libwinpr-devel-2.2.0-7.el8_6.3.ppc64le.rpm SHA-256: 549a2e8d00ba0c4bf83f9358f26bb981931f134430522db1f6ba22d06f8242fb

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
freerdp-2.2.0-7.el8_6.3.src.rpm SHA-256: f3ce65837929c6b3717c19ffd736cc2929b8dc01faf09de8e7c963e51d0cd104
x86_64
freerdp-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 913e5ec1974bb9c9ac6bb4003244873be2717f348052b13ac932f0374bc85c28
freerdp-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 381617fd1097e0d234c31be2a87c2e495e09c4746e47d80de8edaa722d8c6a9f
freerdp-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 78dfee635dde09875ebef11de10576c0d36574f2bbc72045f59d87b35c7efdaa
freerdp-debugsource-2.2.0-7.el8_6.3.i686.rpm SHA-256: ad6c2c3049e7ad52b41929d53ae94559e5ad62bdbca6a99fae948d823aeb8afd
freerdp-debugsource-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 0f4b7835ed193a3b123ae98da005e64b816f50e54c8155d730a6e58a79a9abd9
freerdp-libs-2.2.0-7.el8_6.3.i686.rpm SHA-256: b184e9e7b0aa0b4fb7b790322761b5afe39242e4a18485ca6753e322feb34d2e
freerdp-libs-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: d3673747b042cbed61d2abf9311d222d241288031cd369e14b2363147ad0ecc9
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 2f1d0f000ea0f7c007a87b7d87ca06b52b9e9fe14c33a20ad3a3e176a3e11ab6
freerdp-libs-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 478fb914da18c8638ff2e15c5d42d2095e921b55d26dfa754f69350bc16c2c19
libwinpr-2.2.0-7.el8_6.3.i686.rpm SHA-256: 8f10cc6e7d6868b33a3799a557ec52200cc3b222496b75f08dcfceef19b8a226
libwinpr-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: e94a393b64ef8c4b3aaa7e093f304a723cab4de1bfb632aa2809d8e44632e0ca
libwinpr-debuginfo-2.2.0-7.el8_6.3.i686.rpm SHA-256: 648f240b1f4fdbbc1aa75bdfdd769f4447c64dca40b6f19e0982cd0dbc642ecc
libwinpr-debuginfo-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: ecec35973ca8a7b7478666bc770b33a617914767f52f503cd74a792276e3ccbc
libwinpr-devel-2.2.0-7.el8_6.3.i686.rpm SHA-256: d59771bf2dbd1ea853e8928389cd9713330a7099b0a2afc6ae048ecc03ca6b56
libwinpr-devel-2.2.0-7.el8_6.3.x86_64.rpm SHA-256: 500cba5ff1e6affa1e9d08e68e5843afea70c2e85455ebec4f560b8b50d39a41

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.