ELSA-2026-20546

ELSA-2026-20546 - freerdp security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-07-01

Description

[2.1.1-5.0.9]
- Fixed CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775
CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985
[Orabug: 39440279]

[2.1.1-5.0.7]
- Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732
CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676 CVE-2026-24679
CVE-2026-24684 CVE-2026-31806 [Orabug: 39272429]

[2.1.1-5.0.5]
- Fixed CVE-2026-26955 CVE-2026-26956 [Orabug: 39189643]

[2:2.2.0-5.0.3]
- Fixed CVE-2026-22855 CVE-2026-22858 CVE-2026-22859 [Orabug: 39075086]

[2:2.2.0-5.0.1]
- fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533
CVE-2026-23884 [Orabug: 38971897]

[2:2.2.0-5]
- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscan

[2:2.2.0-4]
- Refactored RPC gateway parser (rhbz#2017944)

[2.1.1-3]
- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)

[2.1.1-2]
- Update to 2.1.1 (#1834286)

[2.0.0-4.rc4]
- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)

Related CVEs

CVE-2026-25952

CVE-2026-26986

CVE-2026-27951

CVE-2026-29775

CVE-2026-31883

CVE-2026-31884

CVE-2026-31885

CVE-2026-33985

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	freerdp-2.1.1-5.0.9.el7_9.src.rpm	925613109dfdcaa038811956924791d758f72449b3662aa1ffdf8104a7462cb7	-	ol7_x86_64_latest_ELS
	freerdp-2.1.1-5.0.9.el7_9.x86_64.rpm	58cc812b8e1e9b5c0d09ff2a19dc3d3a0f6f0566b8a6a608afbc2310ea1ab88d	-	ol7_x86_64_latest_ELS
	freerdp-devel-2.1.1-5.0.9.el7_9.i686.rpm	36a3816be3086dfeda12fb496e0a510ee8f5f23630a518df80ffc47fb1d195fd	-	ol7_x86_64_latest_ELS
	freerdp-devel-2.1.1-5.0.9.el7_9.x86_64.rpm	d4c15a941081f49857ecaa41e9b26aba16fb9d47329b29ea05d7ecc627120c16	-	ol7_x86_64_latest_ELS
	freerdp-libs-2.1.1-5.0.9.el7_9.i686.rpm	c9f89f62167d8bd14e2d95f3fcfda5359b79987ae8a51925b95bc48824cd6afc	-	ol7_x86_64_latest_ELS
	freerdp-libs-2.1.1-5.0.9.el7_9.x86_64.rpm	ace36c438cfc4a44219959d032417921fa9c61c327582eee367c908eae6c3e90	-	ol7_x86_64_latest_ELS
	libwinpr-2.1.1-5.0.9.el7_9.i686.rpm	e7c2680e8e3fe688c6f289adefb048f4e8e137c810ab976a4cfee9421e54febc	-	ol7_x86_64_latest_ELS
	libwinpr-2.1.1-5.0.9.el7_9.x86_64.rpm	8a0dbc4980ad707c61ed0a2c48ba400ea5f4df71586d72bca212420b3e0a7ab2	-	ol7_x86_64_latest_ELS
	libwinpr-devel-2.1.1-5.0.9.el7_9.i686.rpm	ac987ef9555fc07a0229ea2011e60f3909e45522b87f4e6a6984bf716f6c417b	-	ol7_x86_64_latest_ELS
	libwinpr-devel-2.1.1-5.0.9.el7_9.x86_64.rpm	291deb8c91550a4f93eaaa38e3ee80b8000f218ba900bda58b727bc1192ef595	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team