RHSA-2026:61379
Vulnerability from csaf_redhat - Published: 2026-08-31 12:55 - Updated: 2026-08-31 14:15A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol (RDP) response. This occurs because the client incorrectly uses a smaller `alloc_hint` value instead of the actual `StubLength` for buffer capacity during response reassembly. This allows attacker-controlled data to be written beyond the intended buffer, leading to a client crash and potentially enabling arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in FreeRDP. When the `async-update` feature is enabled, a malicious or compromised Remote Desktop Protocol (RDP) server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to crash, resulting in a Denial of Service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for freerdp is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301)\n\n* FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288)\n\n* FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291)\n\n* FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:61379",
"url": "https://access.redhat.com/errata/RHSA-2026:61379"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2509994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509994"
},
{
"category": "external",
"summary": "2510001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510001"
},
{
"category": "external",
"summary": "2510010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510010"
},
{
"category": "external",
"summary": "2519824",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519824"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61379.json"
}
],
"title": "Red Hat Security Advisory: freerdp security update",
"tracking": {
"current_release_date": "2026-08-31T14:15:04+00:00",
"generator": {
"date": "2026-08-31T14:15:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:61379",
"initial_release_date": "2026-08-31T12:55:42+00:00",
"revision_history": [
{
"date": "2026-08-31T12:55:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-31T12:55:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-31T14:15:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "freerdp-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "freerdp-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"product": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"product_id": "libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@2.11.7-7.el9_8.6?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"product_id": "freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"product_id": "libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"product_id": "freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product_id": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product_id": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product_id": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"product_id": "freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:2.11.7-7.el9_8.6.i686",
"product": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.i686",
"product_id": "libwinpr-2:2.11.7-7.el9_8.6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@2.11.7-7.el9_8.6?arch=i686\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "freerdp-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "freerdp-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"product": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"product_id": "libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@2.11.7-7.el9_8.6?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"product": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"product_id": "libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@2.11.7-7.el9_8.6?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"product_id": "freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"product_id": "libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"product_id": "freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product_id": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product_id": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product_id": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "freerdp-2:2.11.7-7.el9_8.6.s390x",
"product_id": "freerdp-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"product_id": "freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:2.11.7-7.el9_8.6.s390x",
"product": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.s390x",
"product_id": "libwinpr-2:2.11.7-7.el9_8.6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@2.11.7-7.el9_8.6?arch=s390x\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:2.11.7-7.el9_8.6.src",
"product": {
"name": "freerdp-2:2.11.7-7.el9_8.6.src",
"product_id": "freerdp-2:2.11.7-7.el9_8.6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@2.11.7-7.el9_8.6?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:2.11.7-7.el9_8.6.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src"
},
"product_reference": "freerdp-2:2.11.7-7.el9_8.6.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "libwinpr-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "libwinpr-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64"
},
"product_reference": "libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686"
},
"product_reference": "libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le"
},
"product_reference": "libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x"
},
"product_reference": "libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
},
"product_reference": "libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-55194",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-08-19T18:01:17.676363+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519824"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol (RDP) response. This occurs because the client incorrectly uses a smaller `alloc_hint` value instead of the actual `StubLength` for buffer capacity during response reassembly. This allows attacker-controlled data to be written beyond the intended buffer, leading to a client crash and potentially enabling arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A heap buffer overflow flaw was found in FreeRDP\u0027s TS Gateway RPC client (`libfreerdp/core/gateway/rpc_client.c`). During response fragment reassembly in `rpc_client_recv_fragment`, stream allocation relies on the server-provided `alloc_hint` rather than the actual `StubLength`. A malicious TS Gateway can send a `PTYPE_RESPONSE` packet with a small `alloc_hint` and a larger payload, causing `Stream_Write` to overwrite memory beyond the fixed 4096-byte buffer (`pdu-\u003es`). This can result in client crashes or potential arbitrary code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55194"
},
{
"category": "external",
"summary": "RHBZ#2519824",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519824"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55194"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55194",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55194"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/9f2da52c2341cc14a96ad12e69c5b83d0bcd8b5a",
"url": "https://github.com/FreeRDP/FreeRDP/commit/9f2da52c2341cc14a96ad12e69c5b83d0bcd8b5a"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/pull/12873",
"url": "https://github.com/FreeRDP/FreeRDP/pull/12873"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.27.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.27.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9gxm-3mf5-f5cx",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9gxm-3mf5-f5cx"
}
],
"release_date": "2026-08-19T17:50:30.158000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T12:55:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61379"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid connecting through untrusted TS Gateways (RD Gateways) or disable gateway parameters (such as omitting `/g:` in `xfreerdp`) to force direct RDP connections and bypass RPC response parsing.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response"
},
{
"cve": "CVE-2026-67288",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-08-01T13:02:16.978525+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510001"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate denial of service flaw affects FreeRDP in Red Hat products. When smartcard emulation is enabled, a remote attacker can exploit this vulnerability by sending malformed smartcard cache requests, leading to a null pointer dereference and subsequent termination of the FreeRDP client process. This can disrupt active remote desktop sessions for affected users.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67288"
},
{
"category": "external",
"summary": "RHBZ#2510001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510001"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67288"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67288",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67288"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-smartcard-cache",
"url": "https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-smartcard-cache"
}
],
"release_date": "2026-08-01T12:22:18.305000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T12:55:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61379"
},
{
"category": "workaround",
"details": "If smartcard redirection/emulation is unused, do not enable it (omit /smartcard and /smartcard-logon, or start with /smartcard:off). Only connect FreeRDP clients to trusted RDP endpoints",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests"
},
{
"cve": "CVE-2026-67291",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-01T13:02:45.885457+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510010"
}
],
"notes": [
{
"category": "description",
"text": "A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate heap out-of-bounds read in FreeRDP affects Red Hat products by allowing an untrusted RDP server to remotely crash a connecting client without authentication, resulting in a loss of application availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67291"
},
{
"category": "external",
"summary": "RHBZ#2510010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67291"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67291",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67291"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-heap-out-of-bounds-read-via-glyph-fragment-add",
"url": "https://www.vulncheck.com/advisories/freerdp-before-heap-out-of-bounds-read-via-glyph-fragment-add"
}
],
"release_date": "2026-08-01T12:22:18.322000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T12:55:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61379"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid connecting FreeRDP clients to untrusted or potentially malicious RDP servers. If such connections are required, run the client on a dedicated, isolated system so a client crash is contained and does not impact other workloads.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read"
},
{
"cve": "CVE-2026-67301",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-01T13:01:53.731118+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509994"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. When the `async-update` feature is enabled, a malicious or compromised Remote Desktop Protocol (RDP) server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to crash, resulting in a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate out-of-bounds read flaw in FreeRDP allows a malicious server to cause memory disclosure or crash the client, but only when the non-default async-update feature is explicitly enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67301"
},
{
"category": "external",
"summary": "RHBZ#2509994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509994"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67301"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67301",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67301"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-out-of-bounds-read-via-polygon-async-message-proxy",
"url": "https://www.vulncheck.com/advisories/freerdp-before-out-of-bounds-read-via-polygon-async-message-proxy"
}
],
"release_date": "2026-08-01T12:22:16.955000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T12:55:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61379"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid enabling the `async-update` feature when using FreeRDP clients. This feature is not enabled by default. If `xfreerdp` is used, ensure the `/async-update` command-line option is not specified. Disabling this feature may impact performance in certain RDP sessions where asynchronous updates are beneficial.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.src",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-2:2.11.7-7.el9_8.6.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-debugsource-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-devel-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:freerdp-libs-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-debuginfo-2:2.11.7-7.el9_8.6.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.i686",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libwinpr-devel-2:2.11.7-7.el9_8.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.