Skip to content
OpenAdvisories
High RHSA-2026:54667 1 CVE

Red Hat Security Advisory: freerdp security update

Published Aug 14, 2026 · Updated Aug 14, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp-debuginfo 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp-debugsource 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp-devel 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp-libs 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp-libs-debuginfo 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp-server 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 freerdp-server-debuginfo 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libwinpr 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libwinpr-debuginfo 2:3.10.3-3.el10_0.10
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libwinpr-devel 2:3.10.3-3.el10_0.10

Vulnerabilities 1

  • High 7.5
    CVE-2026-55827

    FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499159
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54667.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-55827
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-55827
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-55827
  • article
    https://github.com/FreeRDP/FreeRDP/commit/e58adf922ea4c0d5495e59a1fe488d70092e0e3e
  • article
    https://github.com/FreeRDP/FreeRDP/pull/12899
  • article
    https://github.com/FreeRDP/FreeRDP/releases/tag/3.27.1
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c495-h83v-3prp