Red Hat Product Errata RHSA-2026:71390 - Security Advisory
Issued:
2026-09-24
Updated:
2026-09-24

RHSA-2026:71390 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301)
  • FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288)
  • FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291)
  • FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x

Fixes

  • BZ - 2509994 - CVE-2026-67301 FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
  • BZ - 2510001 - CVE-2026-67288 FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
  • BZ - 2510010 - CVE-2026-67291 FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
  • BZ - 2519824 - CVE-2026-55194 FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
x86_64
freerdp-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 3401abb4513f88448c5fb2421b322811dfa325a5658895287b57ad61feb5a952
freerdp-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: 63e65189f87f1b3a03c2f5d5d0ff81ea01d796c549049b8dfb9c040513c9ca90
freerdp-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: e3830e65ce144d53dea6081f963eaf7f9f5f8a11007683ac2b3f6b93113c5934
freerdp-debugsource-2.11.2-1.el9_4.11.i686.rpm SHA-256: 2fcbc955f8bc18a19c66c19687ae55145a8297bfc5c1b69e4b0433031d28d633
freerdp-debugsource-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 2d361a7fc800f3a48965df39e4a31b447a0545c9f9b01694f539bc484440d259
freerdp-libs-2.11.2-1.el9_4.11.i686.rpm SHA-256: a771e55835b587504d96f62b20d02110451c7a4064ca5a0565460064fc7edc14
freerdp-libs-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 224c9d129dc9ab6087c3c764081a66fb170a3c526dbdd9e40eb1d32da30facf1
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: 7e0da8ed083ed68edbfdffd727227a2f82cbcb2d9e212df211e801be593bdbba
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 0a0966862a8943cb4b99177373ccd888cdccdd31e89f146ce856496f322824c7
libwinpr-2.11.2-1.el9_4.11.i686.rpm SHA-256: 52a9440ca705edf92bf11589e96da87cf6ee3d6bd869f146b6bef944c1e97b08
libwinpr-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 18e984f55013ef2df9b8dca4d494880efbed51518d142b2bdb1cb227e832c138
libwinpr-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: cef7aa5390082fb93a0ff45d9d9cc3d27dcb1482cf092f9a0191dd7f397bb6c4
libwinpr-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 1b428d31da12fbbdad44bc3ebda586727d86ca5a77d247261427352ab3db115f

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
ppc64le
freerdp-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 37067f2cdce46d8f8e68905d0109da00b12b3f5026590566d8c596384edcf695
freerdp-debuginfo-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 5f736d51ead77da2acaeafb9b547430d2152e420cc42e25da3b209b6c51538f2
freerdp-debugsource-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: fd9ffdf6888a7bdfe223a0380f83b99aeb4896644b78e3af8f51d72d76d2aa64
freerdp-libs-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: c0a7680387c26bd6346e3361be787ee46fd26a134b3814310370b302197f291b
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 019079b596b6ade374d359dc7bea5b2e5d9637685ba2a5c1724c54cfaae967c6
libwinpr-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 43846b29b182c59fc49d811aa05c7de6c21c0db56279f697e468a31bcbc368cc
libwinpr-debuginfo-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 5fe3f8274fcc0c3d105c03096d535b24634e5e02135591dd1fce81c535bb1da8

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
x86_64
freerdp-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 3401abb4513f88448c5fb2421b322811dfa325a5658895287b57ad61feb5a952
freerdp-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: 63e65189f87f1b3a03c2f5d5d0ff81ea01d796c549049b8dfb9c040513c9ca90
freerdp-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: e3830e65ce144d53dea6081f963eaf7f9f5f8a11007683ac2b3f6b93113c5934
freerdp-debugsource-2.11.2-1.el9_4.11.i686.rpm SHA-256: 2fcbc955f8bc18a19c66c19687ae55145a8297bfc5c1b69e4b0433031d28d633
freerdp-debugsource-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 2d361a7fc800f3a48965df39e4a31b447a0545c9f9b01694f539bc484440d259
freerdp-libs-2.11.2-1.el9_4.11.i686.rpm SHA-256: a771e55835b587504d96f62b20d02110451c7a4064ca5a0565460064fc7edc14
freerdp-libs-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 224c9d129dc9ab6087c3c764081a66fb170a3c526dbdd9e40eb1d32da30facf1
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: 7e0da8ed083ed68edbfdffd727227a2f82cbcb2d9e212df211e801be593bdbba
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 0a0966862a8943cb4b99177373ccd888cdccdd31e89f146ce856496f322824c7
libwinpr-2.11.2-1.el9_4.11.i686.rpm SHA-256: 52a9440ca705edf92bf11589e96da87cf6ee3d6bd869f146b6bef944c1e97b08
libwinpr-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 18e984f55013ef2df9b8dca4d494880efbed51518d142b2bdb1cb227e832c138
libwinpr-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: cef7aa5390082fb93a0ff45d9d9cc3d27dcb1482cf092f9a0191dd7f397bb6c4
libwinpr-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 1b428d31da12fbbdad44bc3ebda586727d86ca5a77d247261427352ab3db115f

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
aarch64
freerdp-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: ed0c54d0f8bf050c9cc543226a0c70bee45936e4efa2de0c83d9d7f9738dd33a
freerdp-debuginfo-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 743ec7dbf88298831de6ffa359f410b6ab68430d7880a0ac659073234e48fa53
freerdp-debugsource-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: bea81680eee54f593f976f0bf9480c1077483a93d0be7421c1bc972444ac5fd9
freerdp-libs-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 479f2b2b88ed40ba53e25806a39f21f2fd0f337856712b3bd0a743e04ae73dec
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 5922266b9b8f22c3e1f76eba1244e2b78c7dbb64532203f38c31c04327152a4b
libwinpr-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: c94b78900e502729b0944ab0b02b54b56c665c99a4fc587b0e93e0a8b8b20d4b
libwinpr-debuginfo-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 038ece927522664ca053b1df678d4ab361d3af13056935d6e82400e036e15964

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
s390x
freerdp-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 4b6fd7832f7522aa808ccd4a749d8f98c54d78964fa372edf9bec3f76df626ea
freerdp-debuginfo-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 58531348eecbd8ed7f9493494e580996a319f9200c2b7bdb7adf7642b8588061
freerdp-debugsource-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 95c96146f93955dd64d3a52ca6e302c23c954e86100ceccd6e476d05e825a6ad
freerdp-libs-2.11.2-1.el9_4.11.s390x.rpm SHA-256: bf18a6db38503deffea0cc84b88dc3a5df5d037ab0ac1939cbc22995d4007876
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 0184edb8ca638ffd262efe96ba0f8736c00febe065096a791a4fc6a6453cfe9f
libwinpr-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 3d9041cdabad89ef5b79e529810a6619bb700b1b486c544398f8721693639621
libwinpr-debuginfo-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 27e1af755c9e99ca1085d9503bca3f2d7e3e43ff787c36547ff0c66b499f71ec

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
x86_64
freerdp-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 3401abb4513f88448c5fb2421b322811dfa325a5658895287b57ad61feb5a952
freerdp-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: 63e65189f87f1b3a03c2f5d5d0ff81ea01d796c549049b8dfb9c040513c9ca90
freerdp-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: e3830e65ce144d53dea6081f963eaf7f9f5f8a11007683ac2b3f6b93113c5934
freerdp-debugsource-2.11.2-1.el9_4.11.i686.rpm SHA-256: 2fcbc955f8bc18a19c66c19687ae55145a8297bfc5c1b69e4b0433031d28d633
freerdp-debugsource-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 2d361a7fc800f3a48965df39e4a31b447a0545c9f9b01694f539bc484440d259
freerdp-libs-2.11.2-1.el9_4.11.i686.rpm SHA-256: a771e55835b587504d96f62b20d02110451c7a4064ca5a0565460064fc7edc14
freerdp-libs-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 224c9d129dc9ab6087c3c764081a66fb170a3c526dbdd9e40eb1d32da30facf1
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: 7e0da8ed083ed68edbfdffd727227a2f82cbcb2d9e212df211e801be593bdbba
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 0a0966862a8943cb4b99177373ccd888cdccdd31e89f146ce856496f322824c7
libwinpr-2.11.2-1.el9_4.11.i686.rpm SHA-256: 52a9440ca705edf92bf11589e96da87cf6ee3d6bd869f146b6bef944c1e97b08
libwinpr-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 18e984f55013ef2df9b8dca4d494880efbed51518d142b2bdb1cb227e832c138
libwinpr-debuginfo-2.11.2-1.el9_4.11.i686.rpm SHA-256: cef7aa5390082fb93a0ff45d9d9cc3d27dcb1482cf092f9a0191dd7f397bb6c4
libwinpr-debuginfo-2.11.2-1.el9_4.11.x86_64.rpm SHA-256: 1b428d31da12fbbdad44bc3ebda586727d86ca5a77d247261427352ab3db115f

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
aarch64
freerdp-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: ed0c54d0f8bf050c9cc543226a0c70bee45936e4efa2de0c83d9d7f9738dd33a
freerdp-debuginfo-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 743ec7dbf88298831de6ffa359f410b6ab68430d7880a0ac659073234e48fa53
freerdp-debugsource-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: bea81680eee54f593f976f0bf9480c1077483a93d0be7421c1bc972444ac5fd9
freerdp-libs-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 479f2b2b88ed40ba53e25806a39f21f2fd0f337856712b3bd0a743e04ae73dec
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 5922266b9b8f22c3e1f76eba1244e2b78c7dbb64532203f38c31c04327152a4b
libwinpr-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: c94b78900e502729b0944ab0b02b54b56c665c99a4fc587b0e93e0a8b8b20d4b
libwinpr-debuginfo-2.11.2-1.el9_4.11.aarch64.rpm SHA-256: 038ece927522664ca053b1df678d4ab361d3af13056935d6e82400e036e15964

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
ppc64le
freerdp-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 37067f2cdce46d8f8e68905d0109da00b12b3f5026590566d8c596384edcf695
freerdp-debuginfo-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 5f736d51ead77da2acaeafb9b547430d2152e420cc42e25da3b209b6c51538f2
freerdp-debugsource-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: fd9ffdf6888a7bdfe223a0380f83b99aeb4896644b78e3af8f51d72d76d2aa64
freerdp-libs-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: c0a7680387c26bd6346e3361be787ee46fd26a134b3814310370b302197f291b
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 019079b596b6ade374d359dc7bea5b2e5d9637685ba2a5c1724c54cfaae967c6
libwinpr-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 43846b29b182c59fc49d811aa05c7de6c21c0db56279f697e468a31bcbc368cc
libwinpr-debuginfo-2.11.2-1.el9_4.11.ppc64le.rpm SHA-256: 5fe3f8274fcc0c3d105c03096d535b24634e5e02135591dd1fce81c535bb1da8

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4

SRPM
freerdp-2.11.2-1.el9_4.11.src.rpm SHA-256: 5cb2c7893bebd087b201d469263649dad5d540459dd28a4444c85e4524e183c6
s390x
freerdp-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 4b6fd7832f7522aa808ccd4a749d8f98c54d78964fa372edf9bec3f76df626ea
freerdp-debuginfo-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 58531348eecbd8ed7f9493494e580996a319f9200c2b7bdb7adf7642b8588061
freerdp-debugsource-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 95c96146f93955dd64d3a52ca6e302c23c954e86100ceccd6e476d05e825a6ad
freerdp-libs-2.11.2-1.el9_4.11.s390x.rpm SHA-256: bf18a6db38503deffea0cc84b88dc3a5df5d037ab0ac1939cbc22995d4007876
freerdp-libs-debuginfo-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 0184edb8ca638ffd262efe96ba0f8736c00febe065096a791a4fc6a6453cfe9f
libwinpr-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 3d9041cdabad89ef5b79e529810a6619bb700b1b486c544398f8721693639621
libwinpr-debuginfo-2.11.2-1.el9_4.11.s390x.rpm SHA-256: 27e1af755c9e99ca1085d9503bca3f2d7e3e43ff787c36547ff0c66b499f71ec

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.