RLSA-2026:54487

Опубликовано: 14 авг. 2026

Источник: rocky

Оценка: Important

Описание

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)
FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)
FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow (CVE-2026-68580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 9

Наименование	Архитектура	Релиз	RPM
freerdp	aarch64	7.el9_8.5	freerdp-2.11.7-7.el9_8.5.aarch64.rpm
freerdp-libs	aarch64	7.el9_8.5	freerdp-libs-2.11.7-7.el9_8.5.aarch64.rpm
libwinpr	aarch64	7.el9_8.5	libwinpr-2.11.7-7.el9_8.5.aarch64.rpm
freerdp	x86_64	7.el9_8.5	freerdp-2.11.7-7.el9_8.5.x86_64.rpm
freerdp-libs	i686	7.el9_8.5	freerdp-libs-2.11.7-7.el9_8.5.i686.rpm
freerdp-libs	x86_64	7.el9_8.5	freerdp-libs-2.11.7-7.el9_8.5.x86_64.rpm
libwinpr	i686	7.el9_8.5	libwinpr-2.11.7-7.el9_8.5.i686.rpm
libwinpr	x86_64	7.el9_8.5	libwinpr-2.11.7-7.el9_8.5.x86_64.rpm