Skip to content
OpenAdvisories
High ELSA-2026-37207 1 CVE

Important: freerdp security update (Oracle Linux 9)

Published Jul 10, 2026 · Updated Jul 10, 2026

Ecosystem: Oracle Linux

Summary

[2:2.11.7-7.4]
- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
Resolves: RHEL-186991

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 freerdp 2:2.11.7-7.el9_8.4
Oracle Linux · 9 freerdp-devel 2:2.11.7-7.el9_8.4
Oracle Linux · 9 freerdp-libs 2:2.11.7-7.el9_8.4
Oracle Linux · 9 libwinpr 2:2.11.7-7.el9_8.4
Oracle Linux · 9 libwinpr-devel 2:2.11.7-7.el9_8.4

Vulnerabilities 1

  • High 7.7
    CVE-2026-45700

    Heap-buffer-overflow write in planar bitmap decoder

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X d…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu