Skip to content
OpenAdvisories
High ELSA-2026-38501 1 CVE

Important: freerdp security update (Oracle Linux 8)

Published Jul 13, 2026 · Updated Jul 13, 2026

Ecosystem: Oracle Linux

Summary

[2:2.11.7-10]
- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
Resolves: RHEL-186983

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 freerdp 2:2.11.7-10.el8_10
Oracle Linux · 8 freerdp-devel 2:2.11.7-10.el8_10
Oracle Linux · 8 freerdp-libs 2:2.11.7-10.el8_10
Oracle Linux · 8 libwinpr 2:2.11.7-10.el8_10
Oracle Linux · 8 libwinpr-devel 2:2.11.7-10.el8_10

Vulnerabilities 1

  • High 7.7
    CVE-2026-45700

    Heap-buffer-overflow write in planar bitmap decoder

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X d…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu