Security News

Cybersecurity news aggregator

🔄
HIGH Updates Red Hat Errata

RHSA-2026:58713: Important: freerdp security update

This security update addresses multiple critical vulnerabilities in FreeRDP, including remote code execution via malicious RDP files (CVE-2026-64624, CVSS 7.8) and HTTP Proxy request injection (CVE-2026-67289, CVSS 9.8). The vulnerabilities affect FreeRDP versions prior to 3.28.0. Users must upgrade to FreeRDP version 3.28.0 to remediate these issues.
Read Full Article →

Red Hat Product Errata RHSA-2026:58713 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:58713 - Security Advisory Overview Updated Packages Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for freerdp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624) FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299) FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289) FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow (CVE-2026-68580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2503096 - CVE-2026-64624 FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files BZ - 2509985 - CVE-2026-67299 FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message BZ - 2510004 - CVE-2026-67289 FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection BZ - 2510125 - CVE-2026-68580 FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow CVEs CVE-2026-64624 CVE-2026-67289 CVE-2026-67299 CVE-2026-68580 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.12.src.rpm SHA-256: a42d5ec22ecafc2f05b526c27b70b530eca34ec07efc19c454c3b7e402b1ca91 x86_64 freerdp-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: 67de3d0688d8ade3b6918aa63ae049c525f5e9b04d83f366e72f9af4f1c2280f freerdp-debuginfo-2.11.7-1.el9_6.12.i686.rpm SHA-256: b69dbc64f80a7e91deca5939dbbf791046a57e163b6825bb382a57263b4ce817 freerdp-debuginfo-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: 0bcfba4916a37cd80b7a18473974efa220143bc2eebf784ab73dd5abd956419d freerdp-debugsource-2.11.7-1.el9_6.12.i686.rpm SHA-256: 41e006267c8acad0faad1a380c00613749d9487f9bce8daaeec3f24667151232 freerdp-debugsource-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: bcbe153b1381fffbb4aadee9f3d2d652a58e3980017ebcf30cc5eacca97d5e25 freerdp-libs-2.11.7-1.el9_6.12.i686.rpm SHA-256: aab719cae6769f1303b60206864814888c066bc142bcdc55cd1cce94181d8ec8 freerdp-libs-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: c50f425592dce41ec5126913394990dee1c948818b27f39f17652c1d902d05e5 freerdp-libs-debuginfo-2.11.7-1.el9_6.12.i686.rpm SHA-256: dbe49e3fa728ebe1b565fbd4fb8720b17764c98fc8243335924e1c7753937451 freerdp-libs-debuginfo-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: f1fcfce576f6250967bc864acc074b3df9266c4a137a644c4076f3c6eb937e1a libwinpr-2.11.7-1.el9_6.12.i686.rpm SHA-256: acbf28bd59e8fc25de6d71faeb428ed585bdd51d6782dc1bbb5ccf8b95ea3689 libwinpr-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: f50e1b428fd7330a794709732224ec19ca222ef6c153472a205b75b6d13d00dc libwinpr-debuginfo-2.11.7-1.el9_6.12.i686.rpm SHA-256: c1f7a5705d202fbe2c68ad56576db2ad6986f299ebc82691e41d3d5a6d58d61a libwinpr-debuginfo-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: 4edcd73e3d713c5a8433d9b452398447bde5e68f0824bd1e9fed6621764b5b4b Red Hat Enterprise Linux Server - AUS 9.6 SRPM freerdp-2.11.7-1.el9_6.12.src.rpm SHA-256: a42d5ec22ecafc2f05b526c27b70b530eca34ec07efc19c454c3b7e402b1ca91 x86_64 freerdp-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: 67de3d0688d8ade3b6918aa63ae049c525f5e9b04d83f366e72f9af4f1c2280f freerdp-debuginfo-2.11.7-1.el9_6.12.i686.rpm SHA-256: b69dbc64f80a7e91deca5939dbbf791046a57e163b6825bb382a57263b4ce817 freerdp-debuginfo-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: 0bcfba4916a37cd80b7a18473974efa220143bc2eebf784ab73dd5abd956419d freerdp-debugsource-2.11.7-1.el9_6.12.i686.rpm SHA-256: 41e006267c8acad0faad1a380c00613749d9487f9bce8daaeec3f24667151232 freerdp-debugsource-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: bcbe153b1381fffbb4aadee9f3d2d652a58e3980017ebcf30cc5eacca97d5e25 freerdp-libs-2.11.7-1.el9_6.12.i686.rpm SHA-256: aab719cae6769f1303b60206864814888c066bc142bcdc55cd1cce94181d8ec8 freerdp-libs-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: c50f425592dce41ec5126913394990dee1c948818b27f39f17652c1d902d05e5 freerdp-libs-debuginfo-2.11.7-1.el9_6.12.i686.rpm SHA-256: dbe49e3fa728ebe1b565fbd4fb8720b17764c98fc8243335924e1c7753937451 freerdp-libs-debuginfo-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: f1fcfce576f6250967bc864acc074b3df9266c4a137a644c4076f3c6eb937e1a libwinpr-2.11.7-1.el9_6.12.i686.rpm SHA-256: acbf28bd59e8fc25de6d71faeb428ed585bdd51d6782dc1bbb5ccf8b95ea3689 libwinpr-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: f50e1b428fd7330a794709732224ec19ca222ef6c153472a205b75b6d13d00dc libwinpr-debuginfo-2.11.7-1.el9_6.12.i686.rpm SHA-256: c1f7a5705d202fbe2c68ad56576db2ad6986f299ebc82691e41d3d5a6d58d61a libwinpr-debuginfo-2.11.7-1.el9_6.12.x86_64.rpm SHA-256: 4edcd73e3d713c5a8433d9b452398447bde5e68f0824bd1e9fed6621764b5b4b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.12.src.rpm SHA-256: a42d5ec22ecafc2f05b526c27b70b530eca34ec07efc19c454c3b7e402b1ca91 s390x freerdp-2.11.7-1.el9_6.12.s390x.rpm SHA-256: c12539be261f550deeb7657b3256b0542bba0cf2e8743d8c0cdbf0c55c327cbb freerdp-debuginfo-2.11.7-1.el9_6.12.s390x.rpm SHA-256: e59fc48954091a1e26b619d3e16528e55cecb895700fda01a15f7a75466b9b2b freerdp-debugsource-2.11.7-1.el9_6.12.s390x.rpm SHA-256: 53c5376c296daf75469ef6d8ab26fb51dff1db792bb65bbdab57bfcc2f0b3609 freerdp-libs-2.11.7-1.el9_6.12.s390x.rpm SHA-256: 59e4d794b2b5ee500d96c1aa6b12895bc1a673511aa0a0a2fb4117fcc7664223 freerdp-libs-debuginfo-2.11.7-1.el9_6.12.s390x.rpm SHA-256: 3fe418aebe7bccf224a758297e87f0e523e2897ee56538ac055f7ec0e2acb5e6 libwinpr-2.11.7-1.el9_6.12.s390x.rpm SHA-256: 4e0837382e026a8c951df78158d4ba1dcd9e07177a238605a913680b3e2cd9d9 libwinpr-debuginfo-2.11.7-1.el9_6.12.s390x.rpm SHA-256: 9b7c7ec222ae8da0974f873aeffbe8fc9dd7c791ab3be63fd5e729a79acf347e Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.12.src.rpm SHA-256: a42d5ec22ecafc2f05b526c27b70b530eca34ec07efc19c454c3b7e402b1ca91 ppc64le freerdp-2.11.7-1.el9_6.12.ppc64le.rpm SHA-256: cbb117c45f1908279281a88206e74b1d3b0f4c9515af5325f9057ce0eba75d8a freerdp-debuginfo-2.11.7-1.el9_6.12.ppc64le.rpm SHA-256: 5301e3d628c735ef4580b35ade96f67e3cb16d49aa6af37f0ec100a614c83f7b freerdp-debugsource-2.11.7-1.el9_6.12.ppc64le.rpm SHA-256: 47f7efd417cbe770d336184a250c659c17878be941e4bccb71c0280d8c04ecd7 freerdp-libs-2.11.7-1.el9_6.12.ppc64le.rpm SHA-256: e057d838f00ea79a3ce472d1bf3cbb340ce26c8f230987dc847025c9486d0091 freerdp-libs-debuginfo-2.11.7-1.el9_6.12.ppc64le.rpm SHA-256: a9cf9f763c69afde089c28457411ccd958934d232aaad429306e7874ebe960c6 libwinpr-2.11.7-1.el9_6.12.ppc64le.rpm SHA-256: dbc050451e3b34cf28f85146e372b339c71f1444fde5e03389c86b08d14eae3f libwinpr-debuginfo-2.11.7-1.el9_6.12.ppc64le.rpm SHA-256: 743dc19cf14a424c3fe2e85121868478f1058c882b09b7a6b4782472aec16b92 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.12.src.rpm SHA-256: a42d5ec22ecafc2f05b526c27b70b530eca34ec07efc19c454c3b7e402b1ca91 aarch64 freerdp-2.11.7-1.el9_6.12.aarch64.rpm SHA-256: 8313221e62531bc3b0cf8fc71b1652f6616605078ccb50196a9c86f9e8209eea freerdp-debuginfo-2.11.7-1.el9_6.12.aarch64.rpm SHA-256: 1672d1b03b8a03816e99a753c655aa1a66c26942b460232a125adebd5241fc72 freerdp-debugsource-2.11.7-1.el9_6.12.aarch64.rpm SHA-256: c72d716683e166fcb7603998fb897599bb81f5fe371f5f82a2a8fdff6f7c553a freerdp-libs-2.11.7-1.el9_6.12.aarch64.rpm SHA-256: 485ce284cb1fa9c332f2fde8121a8cf4ad7a690e5cc9a24dea6ae0aa65b51bb4 freerdp-libs-debuginfo-2.11.7-1.el9_6.12.aarch64.rpm SHA-256: 249b2da6a2f291d4ff197adc218ceb9e42faa78c302003b65e6679d58d4d3aa3 libwinpr-2.11.7-1.el9_6.12.aarch64.

Share this article