Red Hat Product Errata RHSA-2026:71388 - Security Advisory
Issued:
2026-09-24
Updated:
2026-09-24

RHSA-2026:71388 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301)
  • FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288)
  • FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291)
  • FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x

Fixes

  • BZ - 2509994 - CVE-2026-67301 FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
  • BZ - 2510001 - CVE-2026-67288 FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
  • BZ - 2510010 - CVE-2026-67291 FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
  • BZ - 2519824 - CVE-2026-55194 FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
x86_64
freerdp-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: 4648c54086d66a7b26862469d580345125c5bb0d45703659195df4bb9e0780ee
freerdp-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: faf705e816e514bfadf0e19e900113a71f657ea4fe68832dd6e9b16bf7a166f2
freerdp-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: fe1147a12e2638a1a05e08f42d9a3578067c44b4ab9803f69c2903a37be1cfd7
freerdp-debugsource-2.4.1-6.el9_2.12.i686.rpm SHA-256: 061910c5376442b51eeb63ad1a90e5490424cf2ba732ec5f2f344475f188b1bb
freerdp-debugsource-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: 7f8ef7ebc8e5b53e80b2b61e998e5aab52eea38044335415d8de8ea8a5385d1b
freerdp-libs-2.4.1-6.el9_2.12.i686.rpm SHA-256: be4293af7a93bb15a1a81a20de06298324280b19c5c8b3a55c8897b7d0f776be
freerdp-libs-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: fd5c9aa98b886bd24e9cc672a58fbca15e8a68b5799f7693d0321dc2d245d7ed
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: 50b173c7a79a3d0fb4ec8a4eeb429c9c0da8b5828e42b63f8d5d7b24668c2c24
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: c10498879513ddda84e8ffd0fd949a92d02a41ee68ebdf8aaf8bd910e363d5a2
libwinpr-2.4.1-6.el9_2.12.i686.rpm SHA-256: 7ba7d5cdc54cfe6adf045a139f7afd76af843526869ef9c697fb37d532cd547c
libwinpr-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: bcd7e2a727652a4fd0a9e6f5aea97d18ea5ce894a2acf576b01cccc15a4d4b37
libwinpr-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: 1e06d284f311e754d642eb6fbe6d9a153f7c8dea951118b9511aef21bddc6f9d
libwinpr-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: c6ce02f197f40d35ee4e29a702d8d087529b7b4b559154c6281bda9fc42c43a2

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
ppc64le
freerdp-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: da3431e86929640dbfcf87cec90ee75e8103aa0ab7964780117f6830583b0ec3
freerdp-debuginfo-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: e2a1c8ffe84ffa2fddf3e54129e13bf805177836d6b7f7a02541a295336b29f1
freerdp-debugsource-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: 3a03e843774f0e2cf9974c7eddc77ce207b0395961d35eeab3bba112b0cc197b
freerdp-libs-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: 48fca9294717d5264fe66097e934f81c37ae182e6a43321bca5ecc5176f6f621
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: cd82f0664b8f58e69d9441a719cfb16632c85ac29070a4e84bdf4d2fbc808cb2
libwinpr-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: 60045a346dc5bea2ce44df8245688e34ebf822cf01049280082c3b80562f7a5c
libwinpr-debuginfo-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: d20f3395cbf0c4beded93a23d17a47b4bb21c3a5a203f08ca0a9c6cabe9a938d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
x86_64
freerdp-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: 4648c54086d66a7b26862469d580345125c5bb0d45703659195df4bb9e0780ee
freerdp-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: faf705e816e514bfadf0e19e900113a71f657ea4fe68832dd6e9b16bf7a166f2
freerdp-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: fe1147a12e2638a1a05e08f42d9a3578067c44b4ab9803f69c2903a37be1cfd7
freerdp-debugsource-2.4.1-6.el9_2.12.i686.rpm SHA-256: 061910c5376442b51eeb63ad1a90e5490424cf2ba732ec5f2f344475f188b1bb
freerdp-debugsource-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: 7f8ef7ebc8e5b53e80b2b61e998e5aab52eea38044335415d8de8ea8a5385d1b
freerdp-libs-2.4.1-6.el9_2.12.i686.rpm SHA-256: be4293af7a93bb15a1a81a20de06298324280b19c5c8b3a55c8897b7d0f776be
freerdp-libs-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: fd5c9aa98b886bd24e9cc672a58fbca15e8a68b5799f7693d0321dc2d245d7ed
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: 50b173c7a79a3d0fb4ec8a4eeb429c9c0da8b5828e42b63f8d5d7b24668c2c24
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: c10498879513ddda84e8ffd0fd949a92d02a41ee68ebdf8aaf8bd910e363d5a2
libwinpr-2.4.1-6.el9_2.12.i686.rpm SHA-256: 7ba7d5cdc54cfe6adf045a139f7afd76af843526869ef9c697fb37d532cd547c
libwinpr-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: bcd7e2a727652a4fd0a9e6f5aea97d18ea5ce894a2acf576b01cccc15a4d4b37
libwinpr-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: 1e06d284f311e754d642eb6fbe6d9a153f7c8dea951118b9511aef21bddc6f9d
libwinpr-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: c6ce02f197f40d35ee4e29a702d8d087529b7b4b559154c6281bda9fc42c43a2

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
aarch64
freerdp-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 2b9b31d4defa0552d4a85f708d454b491b677be340f172482e1e299602a5231d
freerdp-debuginfo-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 9c79c2d62078c65157bb533f290e42d2e410b5cf487af1b87673ab5bb5b2e25f
freerdp-debugsource-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 519fa642b68e39d9a4cc100b83151fbd06ae69c54c0fa665fbd194f12128741e
freerdp-libs-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 5bdbd1d95cfa488ef77f4efb4f180f40ad4f1cee2ef2f0970227a11269bac14d
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 5002269b2a37bcc7109a6fa6b4ddd72bf2ff122273c8e171fcff19d043ad7361
libwinpr-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: bc4f5c92637aa7e0da5aecd12d522e87b185f4ab23412f7662ed6179beda4176
libwinpr-debuginfo-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: b2fa10049c95fc78bf8364f8947fd06aa0e9c0fd17e495fc725d8c00490ef981

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
s390x
freerdp-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 4e5bcf0c4bf6c210612a1a5887d478c3f6aca428203623842deee1999a8c6c53
freerdp-debuginfo-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 2bc04232fa5e3fb68d95d283a07b2a16b07d1abbb5c957f7614892dcb96944ca
freerdp-debugsource-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 675f8eab504a36eab19a602424f160edd4c28f56d0c5080930b83860f700fa21
freerdp-libs-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 6592bc5754f3c9851db666afc57b0445185cdfd60738ce8619e54973b209e190
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.s390x.rpm SHA-256: cbe1d3a221ce094bc073f986d59741e98c4df32307b3253c49c291933c04abbc
libwinpr-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 95048006191e9ab3347189e782556de76ee8629b420303f4d16d670b273b7a37
libwinpr-debuginfo-2.4.1-6.el9_2.12.s390x.rpm SHA-256: a9f12d299343e26c31fd2cdb4c7b5e043b43cf3eb028352b718539fd74ce647f

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
x86_64
freerdp-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: 4648c54086d66a7b26862469d580345125c5bb0d45703659195df4bb9e0780ee
freerdp-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: faf705e816e514bfadf0e19e900113a71f657ea4fe68832dd6e9b16bf7a166f2
freerdp-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: fe1147a12e2638a1a05e08f42d9a3578067c44b4ab9803f69c2903a37be1cfd7
freerdp-debugsource-2.4.1-6.el9_2.12.i686.rpm SHA-256: 061910c5376442b51eeb63ad1a90e5490424cf2ba732ec5f2f344475f188b1bb
freerdp-debugsource-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: 7f8ef7ebc8e5b53e80b2b61e998e5aab52eea38044335415d8de8ea8a5385d1b
freerdp-libs-2.4.1-6.el9_2.12.i686.rpm SHA-256: be4293af7a93bb15a1a81a20de06298324280b19c5c8b3a55c8897b7d0f776be
freerdp-libs-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: fd5c9aa98b886bd24e9cc672a58fbca15e8a68b5799f7693d0321dc2d245d7ed
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: 50b173c7a79a3d0fb4ec8a4eeb429c9c0da8b5828e42b63f8d5d7b24668c2c24
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: c10498879513ddda84e8ffd0fd949a92d02a41ee68ebdf8aaf8bd910e363d5a2
libwinpr-2.4.1-6.el9_2.12.i686.rpm SHA-256: 7ba7d5cdc54cfe6adf045a139f7afd76af843526869ef9c697fb37d532cd547c
libwinpr-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: bcd7e2a727652a4fd0a9e6f5aea97d18ea5ce894a2acf576b01cccc15a4d4b37
libwinpr-debuginfo-2.4.1-6.el9_2.12.i686.rpm SHA-256: 1e06d284f311e754d642eb6fbe6d9a153f7c8dea951118b9511aef21bddc6f9d
libwinpr-debuginfo-2.4.1-6.el9_2.12.x86_64.rpm SHA-256: c6ce02f197f40d35ee4e29a702d8d087529b7b4b559154c6281bda9fc42c43a2

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
aarch64
freerdp-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 2b9b31d4defa0552d4a85f708d454b491b677be340f172482e1e299602a5231d
freerdp-debuginfo-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 9c79c2d62078c65157bb533f290e42d2e410b5cf487af1b87673ab5bb5b2e25f
freerdp-debugsource-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 519fa642b68e39d9a4cc100b83151fbd06ae69c54c0fa665fbd194f12128741e
freerdp-libs-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 5bdbd1d95cfa488ef77f4efb4f180f40ad4f1cee2ef2f0970227a11269bac14d
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: 5002269b2a37bcc7109a6fa6b4ddd72bf2ff122273c8e171fcff19d043ad7361
libwinpr-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: bc4f5c92637aa7e0da5aecd12d522e87b185f4ab23412f7662ed6179beda4176
libwinpr-debuginfo-2.4.1-6.el9_2.12.aarch64.rpm SHA-256: b2fa10049c95fc78bf8364f8947fd06aa0e9c0fd17e495fc725d8c00490ef981

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
ppc64le
freerdp-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: da3431e86929640dbfcf87cec90ee75e8103aa0ab7964780117f6830583b0ec3
freerdp-debuginfo-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: e2a1c8ffe84ffa2fddf3e54129e13bf805177836d6b7f7a02541a295336b29f1
freerdp-debugsource-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: 3a03e843774f0e2cf9974c7eddc77ce207b0395961d35eeab3bba112b0cc197b
freerdp-libs-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: 48fca9294717d5264fe66097e934f81c37ae182e6a43321bca5ecc5176f6f621
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: cd82f0664b8f58e69d9441a719cfb16632c85ac29070a4e84bdf4d2fbc808cb2
libwinpr-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: 60045a346dc5bea2ce44df8245688e34ebf822cf01049280082c3b80562f7a5c
libwinpr-debuginfo-2.4.1-6.el9_2.12.ppc64le.rpm SHA-256: d20f3395cbf0c4beded93a23d17a47b4bb21c3a5a203f08ca0a9c6cabe9a938d

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2

SRPM
freerdp-2.4.1-6.el9_2.12.src.rpm SHA-256: 8e28bab7bc8f2c6d2d0de85d6f57a1b7c2f7cc63afc29eabf2ef85fa7d89ab25
s390x
freerdp-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 4e5bcf0c4bf6c210612a1a5887d478c3f6aca428203623842deee1999a8c6c53
freerdp-debuginfo-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 2bc04232fa5e3fb68d95d283a07b2a16b07d1abbb5c957f7614892dcb96944ca
freerdp-debugsource-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 675f8eab504a36eab19a602424f160edd4c28f56d0c5080930b83860f700fa21
freerdp-libs-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 6592bc5754f3c9851db666afc57b0445185cdfd60738ce8619e54973b209e190
freerdp-libs-debuginfo-2.4.1-6.el9_2.12.s390x.rpm SHA-256: cbe1d3a221ce094bc073f986d59741e98c4df32307b3253c49c291933c04abbc
libwinpr-2.4.1-6.el9_2.12.s390x.rpm SHA-256: 95048006191e9ab3347189e782556de76ee8629b420303f4d16d670b273b7a37
libwinpr-debuginfo-2.4.1-6.el9_2.12.s390x.rpm SHA-256: a9f12d299343e26c31fd2cdb4c7b5e043b43cf3eb028352b718539fd74ce647f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.