Red Hat Product Errata RHSA-2026:47049 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47049 - Security Advisory Overview Updated Packages Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for freerdp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2483470 - CVE-2026-45700 freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution CVEs CVE-2026-45700 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.11.src.rpm SHA-256: c2bd621a27d25a081309b5a2a32d67a80c5a3782de734dee82ed383f02117d91 x86_64 freerdp-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 18b43e0ba2750f9d17014f38586a5e0499837d41bd934dc4caa6c40bbccffe9b freerdp-debuginfo-2.11.7-1.el9_6.11.i686.rpm SHA-256: c14c0fbc96eedfcf657ba5866e7c1060d3c08b1d0f345c0f48aef2f108ae504c freerdp-debuginfo-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: b0bd2cc44054f483a017ca9f37a3d80889913f8c7f07f0a3b95aa28b8465c963 freerdp-debugsource-2.11.7-1.el9_6.11.i686.rpm SHA-256: a7c7abe9e16366fa577f3024812af4db878fd54e14931c1fb49dff665ecd491f freerdp-debugsource-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 529c70c0f20194303d1d0b952e090365ca6d5abb4b8e72ee9279ee46ba432fc8 freerdp-libs-2.11.7-1.el9_6.11.i686.rpm SHA-256: 823600fb5d2ddd9dc24800465a5fc98be714eba450c97b82570b89956b5552fa freerdp-libs-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: c80c8d2e184f66151f6362b9be4b8939b882608146e900dc597adbf5b15a6969 freerdp-libs-debuginfo-2.11.7-1.el9_6.11.i686.rpm SHA-256: 39e7738976fe6e6a0680ddf81ff29dc7af3e128c56c510559a445dd98e09121e freerdp-libs-debuginfo-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 28c8e151494f800abcd06c2557a836044589e244cc5489f818004b5fa17db1ef libwinpr-2.11.7-1.el9_6.11.i686.rpm SHA-256: e6d6739131eaaab56906a4c7853bbf72d31487cd13918cbac9a6411947f3f7d8 libwinpr-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 2dc4f54e349a77771feca01676019c8085000ee5d109cd828021717d987cb705 libwinpr-debuginfo-2.11.7-1.el9_6.11.i686.rpm SHA-256: 35c62e72b4a983e01611412160ae953e09b313370e76b9366a921ca3475b05a3 libwinpr-debuginfo-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 5ea494b3ed6db1fff6453b4b346b9ad6e0eac198d861dda8551b97032bf75371 Red Hat Enterprise Linux Server - AUS 9.6 SRPM freerdp-2.11.7-1.el9_6.11.src.rpm SHA-256: c2bd621a27d25a081309b5a2a32d67a80c5a3782de734dee82ed383f02117d91 x86_64 freerdp-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 18b43e0ba2750f9d17014f38586a5e0499837d41bd934dc4caa6c40bbccffe9b freerdp-debuginfo-2.11.7-1.el9_6.11.i686.rpm SHA-256: c14c0fbc96eedfcf657ba5866e7c1060d3c08b1d0f345c0f48aef2f108ae504c freerdp-debuginfo-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: b0bd2cc44054f483a017ca9f37a3d80889913f8c7f07f0a3b95aa28b8465c963 freerdp-debugsource-2.11.7-1.el9_6.11.i686.rpm SHA-256: a7c7abe9e16366fa577f3024812af4db878fd54e14931c1fb49dff665ecd491f freerdp-debugsource-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 529c70c0f20194303d1d0b952e090365ca6d5abb4b8e72ee9279ee46ba432fc8 freerdp-libs-2.11.7-1.el9_6.11.i686.rpm SHA-256: 823600fb5d2ddd9dc24800465a5fc98be714eba450c97b82570b89956b5552fa freerdp-libs-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: c80c8d2e184f66151f6362b9be4b8939b882608146e900dc597adbf5b15a6969 freerdp-libs-debuginfo-2.11.7-1.el9_6.11.i686.rpm SHA-256: 39e7738976fe6e6a0680ddf81ff29dc7af3e128c56c510559a445dd98e09121e freerdp-libs-debuginfo-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 28c8e151494f800abcd06c2557a836044589e244cc5489f818004b5fa17db1ef libwinpr-2.11.7-1.el9_6.11.i686.rpm SHA-256: e6d6739131eaaab56906a4c7853bbf72d31487cd13918cbac9a6411947f3f7d8 libwinpr-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 2dc4f54e349a77771feca01676019c8085000ee5d109cd828021717d987cb705 libwinpr-debuginfo-2.11.7-1.el9_6.11.i686.rpm SHA-256: 35c62e72b4a983e01611412160ae953e09b313370e76b9366a921ca3475b05a3 libwinpr-debuginfo-2.11.7-1.el9_6.11.x86_64.rpm SHA-256: 5ea494b3ed6db1fff6453b4b346b9ad6e0eac198d861dda8551b97032bf75371 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.11.src.rpm SHA-256: c2bd621a27d25a081309b5a2a32d67a80c5a3782de734dee82ed383f02117d91 s390x freerdp-2.11.7-1.el9_6.11.s390x.rpm SHA-256: ca223351cab5f9d25f196bed245f84d8df776363b9908f5be1f8e31c7bef01d3 freerdp-debuginfo-2.11.7-1.el9_6.11.s390x.rpm SHA-256: c62709407e12103d9e2b3fad045bbdb428a4db2d58a3d7c8f7a4a477e3b553a5 freerdp-debugsource-2.11.7-1.el9_6.11.s390x.rpm SHA-256: dff19173ce657701be177e8249d6f647ffd4e6a7168117105a673c822ce7e78e freerdp-libs-2.11.7-1.el9_6.11.s390x.rpm SHA-256: 680518681946f9a5afceaa51e8a54982b0b6531a331d15d7b44a4576aa8d1226 freerdp-libs-debuginfo-2.11.7-1.el9_6.11.s390x.rpm SHA-256: 6f49f927b2b6346ea561c33ae73664cdd092d42c552a8a66b19d09e9549b5cd1 libwinpr-2.11.7-1.el9_6.11.s390x.rpm SHA-256: 8d171edcf4b0a98fdc42f0f0ae495369bc20c9a6b5e4ac310f9ea4cff83c113e libwinpr-debuginfo-2.11.7-1.el9_6.11.s390x.rpm SHA-256: 25196fc9298b3f351d185c7f8317dc8b2e2dddb628a8aed22423dc4704114407 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.11.src.rpm SHA-256: c2bd621a27d25a081309b5a2a32d67a80c5a3782de734dee82ed383f02117d91 ppc64le freerdp-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: b335a8e6329311bc873c07e41fd014a4c1875122b4dc02a31134f3cf570b97c7 freerdp-debuginfo-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: 21b50700f41b63d65f07afa02ff384056458e79b67435990b7e61f3147f73d0b freerdp-debugsource-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: 3992fe3e4db04353a1da5b61b52d1038412f493c42fb96cb2484ae0e9dca2ab7 freerdp-libs-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: 08b65375d549647bcde202a94523ec54d8ef509a4511cce1ae468f61e42ffd44 freerdp-libs-debuginfo-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: 216f21783d1c54c3b33a389f6ee50c170cdd46ae141becf2b3068c3790c6e900 libwinpr-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: 4ca06ff8a5307292c721a822d3318cc426b6dc102ce45b4f99638711743eaeb3 libwinpr-debuginfo-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: ee89abdf64e3f7dc5cba5ee84f72685419bf49356bce06836ae7ce862e58e8c0 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.11.src.rpm SHA-256: c2bd621a27d25a081309b5a2a32d67a80c5a3782de734dee82ed383f02117d91 aarch64 freerdp-2.11.7-1.el9_6.11.aarch64.rpm SHA-256: 9fb41b2f4e7ce434246391832aeadb632091250cf4a6601535502fd0d36b6ca9 freerdp-debuginfo-2.11.7-1.el9_6.11.aarch64.rpm SHA-256: 671ce563801257f6960cff8ee10ea52202a43c0ba6d5e26585b57d13ba9ce217 freerdp-debugsource-2.11.7-1.el9_6.11.aarch64.rpm SHA-256: 26b92f0e72c1a5401fe0e5eb8b594674d763ac78152ba7ebd809b3fd6b03592e freerdp-libs-2.11.7-1.el9_6.11.aarch64.rpm SHA-256: 870de8d4f476c755d5c27f1504865ca2f4b9876beca7f465e136b1586d556a36 freerdp-libs-debuginfo-2.11.7-1.el9_6.11.aarch64.rpm SHA-256: 2463633c51de57ed3e90942f0cbb83e228724b6ea8c798cdca01cbf1daa14433 libwinpr-2.11.7-1.el9_6.11.aarch64.rpm SHA-256: dcbe9f7b23e3ce1985e27b604fa2ab056f58c41bbadb9e6ac00c63de53b77c1e libwinpr-debuginfo-2.11.7-1.el9_6.11.aarch64.rpm SHA-256: 7cecd6a4ea717f4430a53333b5f58e50d29266943a46827b24659a0c2019eeb3 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM freerdp-2.11.7-1.el9_6.11.src.rpm SHA-256: c2bd621a27d25a081309b5a2a32d67a80c5a3782de734dee82ed383f02117d91 ppc64le freerdp-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: b335a8e6329311bc873c07e41fd014a4c1875122b4dc02a31134f3cf570b97c7 freerdp-debuginfo-2.11.7-1.el9_6.11.ppc64le.rpm SHA-256: 21b50700f41b63
A critical out-of-bounds write vulnerability (CVE-2026-45700, CVSS 9.8) in FreeRDP's planar bitmap decoder allows for arbitrary code execution. The vulnerability affects FreeRDP versions prior to 3.26.0. A fix is available by upgrading to FreeRDP version 3.26.0.