Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp-debuginfo | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp-debugsource | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp-devel | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp-libs | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp-libs-debuginfo | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp-server | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | freerdp-server-debuginfo | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | libwinpr | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | libwinpr-debuginfo | 2:3.10.3-12.el10_2.13 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | libwinpr-devel | 2:3.10.3-12.el10_2.13 |
Vulnerabilities 1
-
Critical 9.3
FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive ne…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2533925
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73979.json
-
report
https://access.redhat.com/security/cve/CVE-2026-91949
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-91949
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91949
-
article
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v6-xfx3-52j6
-
article
https://www.vulncheck.com/advisories/freerdp-3.0.0-through-3.30.0-protocol-negotiation-bypass