Skip to content
OpenAdvisories
High ELSA-2026-69387 1 CVE

Important: freerdp security update (Oracle Linux 8)

Published Sep 23, 2026 · Updated Sep 23, 2026

Ecosystem: Oracle Linux

Summary

[2:2.11.7-13]
- Fix RPC gateway fragment size and capacity checks (CVE-2026-55193)
Resolves: RHEL-247353

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 freerdp 2:2.11.7-13.el8_10
Oracle Linux · 8 freerdp-devel 2:2.11.7-13.el8_10
Oracle Linux · 8 freerdp-libs 2:2.11.7-13.el8_10
Oracle Linux · 8 libwinpr 2:2.11.7-13.el8_10
Oracle Linux · 8 libwinpr-devel 2:2.11.7-13.el8_10

Vulnerabilities 1

  • High 8.7
    CVE-2026-55193

    FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag value in libfreerdp/core/gateway/rpc_bind.c without bounding it to the 4088-byte ReceiveFragment alloca…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine