RLSA-2026:61379

Опубликовано: 01 сент. 2026

Источник: rocky

Оценка: Important

Описание

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301)
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288)
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291)
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 9

Наименование	Архитектура	Релиз	RPM
freerdp	aarch64	7.el9_8.6	freerdp-2.11.7-7.el9_8.6.aarch64.rpm
freerdp-libs	aarch64	7.el9_8.6	freerdp-libs-2.11.7-7.el9_8.6.aarch64.rpm
libwinpr	aarch64	7.el9_8.6	libwinpr-2.11.7-7.el9_8.6.aarch64.rpm
freerdp	x86_64	7.el9_8.6	freerdp-2.11.7-7.el9_8.6.x86_64.rpm
freerdp-libs	i686	7.el9_8.6	freerdp-libs-2.11.7-7.el9_8.6.i686.rpm
freerdp-libs	x86_64	7.el9_8.6	freerdp-libs-2.11.7-7.el9_8.6.x86_64.rpm
libwinpr	i686	7.el9_8.6	libwinpr-2.11.7-7.el9_8.6.i686.rpm
libwinpr	x86_64	7.el9_8.6	libwinpr-2.11.7-7.el9_8.6.x86_64.rpm