Red Hat Product Errata RHSA-2026:98508 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:98508 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242)
  • freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding (CVE-2026-110837)
  • freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication (CVE-2026-111880)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

  • BZ - 2549790 - CVE-2026-109242 freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling
  • BZ - 2552978 - CVE-2026-110837 freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding
  • BZ - 2554625 - CVE-2026-111880 freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication

Red Hat Enterprise Linux for x86_64 9

SRPM
freerdp-2.11.7-13.el9_9.3.src.rpm SHA-256: 50950317fc607f173fbfc6d85ce22c8c3adc9a0eb07c8eb44a3dcd2b2ec904ba
x86_64
freerdp-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 9041d7e5e09ab4094c3f70ea25f76bf92ab0b12d400b7206676f1094dad06aa6
freerdp-debuginfo-2.11.7-13.el9_9.3.i686.rpm SHA-256: 9153a7cdb8765b6a800c2171a421bcb30d9687cf1342a057cf464d6298bbf977
freerdp-debuginfo-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 7fb50d7fd0f3ce149295be4837dca1a0b967e727201ff0a7b29d7552af6183fd
freerdp-debugsource-2.11.7-13.el9_9.3.i686.rpm SHA-256: 9a05d062a48cb33c2e9a44b06dfaba0509cc5d4b7f437ad23a1d1bfefd694124
freerdp-debugsource-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: f90b3bd6bd446e90bcfb3443ac739f5848ddc3ed1d507aa68f1f06c9bcb80f93
freerdp-libs-2.11.7-13.el9_9.3.i686.rpm SHA-256: 4eb6a91b14be2edd957acef3897910e0e6693fc8088343d686b8f439f60a6706
freerdp-libs-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 7491db445d2f26bb37d8cd9781f3ea4f59e68360ac15e431eea9f581d2824871
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.i686.rpm SHA-256: 51c0fe81954a5f9edcb9abe4cde09a7514914c14c1dc52eeaa7be3fd328c01c2
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 854d9a0f32c6a2be73c9d252d0c888f04474a5bed20f4eaa283da2ae1caac954
libwinpr-2.11.7-13.el9_9.3.i686.rpm SHA-256: 18cda863f168e9a78d88293245e62c32dac9653fbe4d7bf046a8afc1273d9653
libwinpr-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: b3e69cfa2d4988ecb68b89c1f814e82be3e2572013c5967ce681f265694a3793
libwinpr-debuginfo-2.11.7-13.el9_9.3.i686.rpm SHA-256: 85a12f549f41e23fd99d9b148170e48ceada4e6b2c2ef8aa8c35405c1dd86db9
libwinpr-debuginfo-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 31507035c1c5c383d6f2e44ef01b53ac0ddb6e2a46660dec408b9a32e44239e2

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
freerdp-2.11.7-13.el9_9.3.src.rpm SHA-256: 50950317fc607f173fbfc6d85ce22c8c3adc9a0eb07c8eb44a3dcd2b2ec904ba
s390x
freerdp-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 8cb640b89815cde9bca52c118b2422d7da22e8b74f6636e8d7af2d153ece1f27
freerdp-debuginfo-2.11.7-13.el9_9.3.s390x.rpm SHA-256: cc326da3eda684b5e2f345c5b221f8e3f125fdba02a1ebf7b63478394762e59d
freerdp-debugsource-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 9b37f9c3bf963b97fd7103c330b81cf51e076077c3e5eb6a7a0834244571863e
freerdp-libs-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 4e3f75719cd419398411eb05527bc15053ccbd41991f73c1602cad257594d5a4
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 28876ee45f7ea8abdc43b78d2b73495b25b141e07e4af376ede7d1fdf569a5fb
libwinpr-2.11.7-13.el9_9.3.s390x.rpm SHA-256: df54222e177b3c425a58baf29bb0f41ea9246a3671af96983256ddb594b08e34
libwinpr-debuginfo-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 5aaedc3e7bc9b47dc37ce6fae998f9f6595c9bfc3d0b70aa827e4d7b62a0500d

Red Hat Enterprise Linux for Power, little endian 9

SRPM
freerdp-2.11.7-13.el9_9.3.src.rpm SHA-256: 50950317fc607f173fbfc6d85ce22c8c3adc9a0eb07c8eb44a3dcd2b2ec904ba
ppc64le
freerdp-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: caf204ba579b570b5cfad3a9590ef79cd1cfdf7ad852e2a361f285d3cce25ef2
freerdp-debuginfo-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: c0022e59e6f04f4b69f93cedbdf7a6748452eb930e6ed303c40fd8d52d2d58a3
freerdp-debugsource-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: 94d83ae29a1d1df4e8f5df994ce417f1bf90c47115e047cd7e77f830c6192931
freerdp-libs-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: f0d53985830617a25b9fd05b0a8c072c759317056d1a674bb736edd0a202b372
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: ec4ed493a87a615ff956c8995797bca1819d2562de53c511caa449322c21694e
libwinpr-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: d8999d533ca6d40b96742e76a894ddca86ed7b9f1826c0064918e01235796f07
libwinpr-debuginfo-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: cbd79f0ac700fd88d7790f6e270b3ba96c956425506be364f462bd8cdf290731

Red Hat Enterprise Linux for ARM 64 9

SRPM
freerdp-2.11.7-13.el9_9.3.src.rpm SHA-256: 50950317fc607f173fbfc6d85ce22c8c3adc9a0eb07c8eb44a3dcd2b2ec904ba
aarch64
freerdp-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 26f9dd4d4df5490a9e2f4b8df72a7e9c020544055a89887a8c0fede44f79547a
freerdp-debuginfo-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: fe33e972864d6665e6de8e2324f9c772ea7c3d441088fc361266367ed593c566
freerdp-debugsource-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 37731f758d8c4cff91ad2dd8ee3a014f522fca03ff320248508e18e813e24571
freerdp-libs-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: d0c53889981f01a445e77a162a6c20fe5c235008f275aa51aa1b7311ba472ded
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 5a58941d49cdd9d683459221fcb297eae8b205d74b02a597654e676ed6a1215a
libwinpr-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 9ffa29d670268e4165f88d575d24604257797ef4e40cd2f5975f2049d1b86048
libwinpr-debuginfo-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 0d59d6f8f5113abd722435ddfd9a35b55f8aae0b9c7a906e0dd963f4784c60d1

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
freerdp-debuginfo-2.11.7-13.el9_9.3.i686.rpm SHA-256: 9153a7cdb8765b6a800c2171a421bcb30d9687cf1342a057cf464d6298bbf977
freerdp-debuginfo-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 7fb50d7fd0f3ce149295be4837dca1a0b967e727201ff0a7b29d7552af6183fd
freerdp-debugsource-2.11.7-13.el9_9.3.i686.rpm SHA-256: 9a05d062a48cb33c2e9a44b06dfaba0509cc5d4b7f437ad23a1d1bfefd694124
freerdp-debugsource-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: f90b3bd6bd446e90bcfb3443ac739f5848ddc3ed1d507aa68f1f06c9bcb80f93
freerdp-devel-2.11.7-13.el9_9.3.i686.rpm SHA-256: cdf5cd41ed8c16d0efd501d207ab0ca01f54f7b516f7c753d00bf77a2465068b
freerdp-devel-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: fa858d10b344362e4183f807d6293ab4bd85fb7d4c32bfab233ac46025b72d37
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.i686.rpm SHA-256: 51c0fe81954a5f9edcb9abe4cde09a7514914c14c1dc52eeaa7be3fd328c01c2
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 854d9a0f32c6a2be73c9d252d0c888f04474a5bed20f4eaa283da2ae1caac954
libwinpr-debuginfo-2.11.7-13.el9_9.3.i686.rpm SHA-256: 85a12f549f41e23fd99d9b148170e48ceada4e6b2c2ef8aa8c35405c1dd86db9
libwinpr-debuginfo-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 31507035c1c5c383d6f2e44ef01b53ac0ddb6e2a46660dec408b9a32e44239e2
libwinpr-devel-2.11.7-13.el9_9.3.i686.rpm SHA-256: f1d445c0f47dd9527fab1df435b372aa59151042a6ca3f5b47fc7252522ca4e5
libwinpr-devel-2.11.7-13.el9_9.3.x86_64.rpm SHA-256: 274f53ac8fa38818e92cec149c5de72e4af56e69de0630483424e8e1802a47a3

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
freerdp-debuginfo-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: c0022e59e6f04f4b69f93cedbdf7a6748452eb930e6ed303c40fd8d52d2d58a3
freerdp-debugsource-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: 94d83ae29a1d1df4e8f5df994ce417f1bf90c47115e047cd7e77f830c6192931
freerdp-devel-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: 84766eb7504c2955fe5bb2f14f2f1782d7df5319a79332a508e49ae6e75a6b3a
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: ec4ed493a87a615ff956c8995797bca1819d2562de53c511caa449322c21694e
libwinpr-debuginfo-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: cbd79f0ac700fd88d7790f6e270b3ba96c956425506be364f462bd8cdf290731
libwinpr-devel-2.11.7-13.el9_9.3.ppc64le.rpm SHA-256: ae8f7e44ef204b2ed5590d382e407bc7332203600aa2d43be6b0a528ce175cf6

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
freerdp-debuginfo-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: fe33e972864d6665e6de8e2324f9c772ea7c3d441088fc361266367ed593c566
freerdp-debugsource-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 37731f758d8c4cff91ad2dd8ee3a014f522fca03ff320248508e18e813e24571
freerdp-devel-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: c9144cdd43f764eca20bc8b5308bf6466ce388de1fdbeeabd5f16bdf09952505
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 5a58941d49cdd9d683459221fcb297eae8b205d74b02a597654e676ed6a1215a
libwinpr-debuginfo-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 0d59d6f8f5113abd722435ddfd9a35b55f8aae0b9c7a906e0dd963f4784c60d1
libwinpr-devel-2.11.7-13.el9_9.3.aarch64.rpm SHA-256: 9f7f21c3ec23eba103aeb32a643539477466b81cb5bfaba7aab9e9b566d9340f

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
freerdp-debuginfo-2.11.7-13.el9_9.3.s390x.rpm SHA-256: cc326da3eda684b5e2f345c5b221f8e3f125fdba02a1ebf7b63478394762e59d
freerdp-debugsource-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 9b37f9c3bf963b97fd7103c330b81cf51e076077c3e5eb6a7a0834244571863e
freerdp-devel-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 9f0547ef48ffa8570ef552020138def4ed9572deca8a5dd59c7e84e5ed5038a4
freerdp-libs-debuginfo-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 28876ee45f7ea8abdc43b78d2b73495b25b141e07e4af376ede7d1fdf569a5fb
libwinpr-debuginfo-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 5aaedc3e7bc9b47dc37ce6fae998f9f6595c9bfc3d0b70aa827e4d7b62a0500d
libwinpr-devel-2.11.7-13.el9_9.3.s390x.rpm SHA-256: 1466c000fd53da7d50fe198925e20b0f89a621bffcb7273a458061064e6563f0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.