Red Hat Product Errata RHSA-2026:98469 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:98469 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway (CVE-2026-55193)
  • FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954)
  • FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964)
  • FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956)
  • FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963)
  • FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959)
  • FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

  • BZ - 2519818 - CVE-2026-55193 FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway
  • BZ - 2533906 - CVE-2026-91954 FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command
  • BZ - 2533911 - CVE-2026-91964 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU
  • BZ - 2533927 - CVE-2026-91956 FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel
  • BZ - 2533930 - CVE-2026-91963 FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure
  • BZ - 2533951 - CVE-2026-91959 FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway
  • BZ - 2533959 - CVE-2026-91953 FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.

Red Hat Enterprise Linux for x86_64 9

SRPM
freerdp-2.11.7-13.el9_9.2.src.rpm SHA-256: 75393d2b58136f9fc3e62fa806a1b6cf9fba88eeb57bc17ab3d54d3062ec8e09
x86_64
freerdp-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: d5810c7dfcbaa69ebb3d983f1f60a24e82caefeb7c7584f310a7b6e184c37376
freerdp-debuginfo-2.11.7-13.el9_9.2.i686.rpm SHA-256: f18f387b74b235e6414009a3f833797038aea701995d1b7a302deb39bb2f66d9
freerdp-debuginfo-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: 7f76cea7152aeeaf22a5d8d0c72003353c95918bc4eb088ccc8bdf51870a6630
freerdp-debugsource-2.11.7-13.el9_9.2.i686.rpm SHA-256: b9b585ed47c575a6894779cccc98973b3c5a86ca82a02b85127745d285654fb5
freerdp-debugsource-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: a3b6f3d40af47d55d32c1cabbbea3a496e637e226b05c1b215ffdc8d576f7c7a
freerdp-libs-2.11.7-13.el9_9.2.i686.rpm SHA-256: 0a76e47f79ea49eaf915c9659a333164c6d15dbea0801b79c5328a55787df354
freerdp-libs-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: caa9bb330964cfef1d937ea8423ef5fc27be5ff202deb2cc7636a8a18f732f19
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.i686.rpm SHA-256: 1df8a550f363ee8b5cea27e166c50ccc80cb869e9f3b17bf9d3671571432cfe3
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: 00ea54cb13a9207a9cc4e6471b74bed43383a87ad9531d49b21d6142cc96847e
libwinpr-2.11.7-13.el9_9.2.i686.rpm SHA-256: f45f27d840c561a1067ac04a40d5bd49f5c7d4939c4062e0397dafb644b62486
libwinpr-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: bbf7a1cfc68d3feef6c32849239b22d9fd3b0daa8cd00837992e6a1165775487
libwinpr-debuginfo-2.11.7-13.el9_9.2.i686.rpm SHA-256: 5d4afa2061df67c361a11c6f5879b2abaecaaf6837219a681671e3ef198e3521
libwinpr-debuginfo-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: af7c5bc6195aeb4130fab4edf092b69110776e462a903f6eeaf83962da91b1a8

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
freerdp-2.11.7-13.el9_9.2.src.rpm SHA-256: 75393d2b58136f9fc3e62fa806a1b6cf9fba88eeb57bc17ab3d54d3062ec8e09
s390x
freerdp-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 5a5a21c8b567cdcd1113f824bc640e3856dd97f9a059e02888b69be1811ddec4
freerdp-debuginfo-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 55e7da2ef6386a98c0053038c458c7a3077b5922ccfde54467c644a6261c8ab9
freerdp-debugsource-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 4701a5e5bd4e326ed0ef0fae3a669d02003f2a6e33115bfc49d37af95f0c9484
freerdp-libs-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 847136c6ef6833b87cb61c5f9e590961def0848b345929fd5ea5695c406c2d4f
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 0b2a276dda75923284565981d6c3aebef6e43b34c2b1af78708186a72eeee162
libwinpr-2.11.7-13.el9_9.2.s390x.rpm SHA-256: a2736484b8c53b746ea90cb3ca9881a57863f925796b0a3133bf4a3263c8e979
libwinpr-debuginfo-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 8d7115a70e6d7df03894a28f149c5580dfba802ab80c082d79d394441949fb12

Red Hat Enterprise Linux for Power, little endian 9

SRPM
freerdp-2.11.7-13.el9_9.2.src.rpm SHA-256: 75393d2b58136f9fc3e62fa806a1b6cf9fba88eeb57bc17ab3d54d3062ec8e09
ppc64le
freerdp-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: bcf8af5a91c9ba7782d98034d142ece50e9faf81434d8cac0523dfd9f10ec2d8
freerdp-debuginfo-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 390e4d33d1cab94509e8cc11d78941d50918b8c1a522e0eb25716e7b8b9958cb
freerdp-debugsource-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 875eeac564e46ea2f050058ca8b84d94ccb9bd6ed571431c7f877246c937a225
freerdp-libs-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 308e176f15502add3ec827f06568932a4f77ec6a7b15ae8e8447421f8e67878c
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: cc6d930aafcbe63de135145d1d74221d4fd80b0ce952c20d4db536d692c548ed
libwinpr-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 0ef58b756005ea2c5e8c303259652157ce3c13e612f4df643b9bd87882c1680c
libwinpr-debuginfo-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 2831c6159314a8f3d2886efb68c8f8ff97ffcfc14bceda762935e2e051590bdb

Red Hat Enterprise Linux for ARM 64 9

SRPM
freerdp-2.11.7-13.el9_9.2.src.rpm SHA-256: 75393d2b58136f9fc3e62fa806a1b6cf9fba88eeb57bc17ab3d54d3062ec8e09
aarch64
freerdp-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: 932432fe7f9b4f082fe572b03dbd64cc8924edb5dd06abda569a15b05db1f6f7
freerdp-debuginfo-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: 9993eaa82e0b9263443eabe2ae4dbfdd23716cc19648326c322197c1c7d0d82b
freerdp-debugsource-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: eead9a806092ea29f8bb72609829be232691023ea0b6efd38d78806a65247020
freerdp-libs-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: fc3d1ed1208824dc2b56f26913a098c9d82157c2b174c21412fd1294f09b7a1c
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: df514aa5afaa8da5dea9a9470b68654e4a3cb1e65af6616e71d8abb592e45128
libwinpr-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: a76922afcff3f35c34e1bc32cb0e5acd95ca96b2c4db69262b8b739046e4d85b
libwinpr-debuginfo-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: 63871343850ac5e78813bb5a27b3aac6ffd130f4ef7dca604a66acfded67756a

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
freerdp-debuginfo-2.11.7-13.el9_9.2.i686.rpm SHA-256: f18f387b74b235e6414009a3f833797038aea701995d1b7a302deb39bb2f66d9
freerdp-debuginfo-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: 7f76cea7152aeeaf22a5d8d0c72003353c95918bc4eb088ccc8bdf51870a6630
freerdp-debugsource-2.11.7-13.el9_9.2.i686.rpm SHA-256: b9b585ed47c575a6894779cccc98973b3c5a86ca82a02b85127745d285654fb5
freerdp-debugsource-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: a3b6f3d40af47d55d32c1cabbbea3a496e637e226b05c1b215ffdc8d576f7c7a
freerdp-devel-2.11.7-13.el9_9.2.i686.rpm SHA-256: 27a6f5674f95ac108b7437a9701c6ffe0a00fcbd894e4633cb3e1a8ca922f702
freerdp-devel-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: b09d35b5475e310631f85d4a3fbd55203bf2c4ea1d014e3b492f5ee882aa131f
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.i686.rpm SHA-256: 1df8a550f363ee8b5cea27e166c50ccc80cb869e9f3b17bf9d3671571432cfe3
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: 00ea54cb13a9207a9cc4e6471b74bed43383a87ad9531d49b21d6142cc96847e
libwinpr-debuginfo-2.11.7-13.el9_9.2.i686.rpm SHA-256: 5d4afa2061df67c361a11c6f5879b2abaecaaf6837219a681671e3ef198e3521
libwinpr-debuginfo-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: af7c5bc6195aeb4130fab4edf092b69110776e462a903f6eeaf83962da91b1a8
libwinpr-devel-2.11.7-13.el9_9.2.i686.rpm SHA-256: 690746a174cbb355e3115443548747d668d881f9863b403267d6b2d090ba5448
libwinpr-devel-2.11.7-13.el9_9.2.x86_64.rpm SHA-256: 6c49cc3d3d8569794d9b621cb4820ae2728e1ff3400fd69348aa3b13b81bf800

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
freerdp-debuginfo-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 390e4d33d1cab94509e8cc11d78941d50918b8c1a522e0eb25716e7b8b9958cb
freerdp-debugsource-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 875eeac564e46ea2f050058ca8b84d94ccb9bd6ed571431c7f877246c937a225
freerdp-devel-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 9d1ee11f5a5bb70bf09fc8b7286d941566d5a890f2011110e20d6d0308f16fde
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: cc6d930aafcbe63de135145d1d74221d4fd80b0ce952c20d4db536d692c548ed
libwinpr-debuginfo-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: 2831c6159314a8f3d2886efb68c8f8ff97ffcfc14bceda762935e2e051590bdb
libwinpr-devel-2.11.7-13.el9_9.2.ppc64le.rpm SHA-256: fd66023abe44043c739960a63c8a993b4587b8bbd3e000e7d3b58f6a606b1bb4

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
freerdp-debuginfo-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: 9993eaa82e0b9263443eabe2ae4dbfdd23716cc19648326c322197c1c7d0d82b
freerdp-debugsource-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: eead9a806092ea29f8bb72609829be232691023ea0b6efd38d78806a65247020
freerdp-devel-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: 718b64b0d5eb4de697ccb64de78d26051e2cad2701812513d34815c636d4bb66
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: df514aa5afaa8da5dea9a9470b68654e4a3cb1e65af6616e71d8abb592e45128
libwinpr-debuginfo-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: 63871343850ac5e78813bb5a27b3aac6ffd130f4ef7dca604a66acfded67756a
libwinpr-devel-2.11.7-13.el9_9.2.aarch64.rpm SHA-256: 353b127344c8f31686ea1c45a6ac850b43f1c57d038145262e784f56c0c07221

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
freerdp-debuginfo-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 55e7da2ef6386a98c0053038c458c7a3077b5922ccfde54467c644a6261c8ab9
freerdp-debugsource-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 4701a5e5bd4e326ed0ef0fae3a669d02003f2a6e33115bfc49d37af95f0c9484
freerdp-devel-2.11.7-13.el9_9.2.s390x.rpm SHA-256: ecb216f35bf34eedfdafc3ff8f15c319ebad6a99ce9a953003c283daf18212db
freerdp-libs-debuginfo-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 0b2a276dda75923284565981d6c3aebef6e43b34c2b1af78708186a72eeee162
libwinpr-debuginfo-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 8d7115a70e6d7df03894a28f149c5580dfba802ab80c082d79d394441949fb12
libwinpr-devel-2.11.7-13.el9_9.2.s390x.rpm SHA-256: 456db1c844fc370c176477bc412b60f22af0a0860b688a5dcc48aecff0c44cbf

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.