ELSA-2026-11323

ELSA-2026-11323 - freerdp security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-09

Description

[2.1.1-5.0.7]
- Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732
CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676 CVE-2026-24679
CVE-2026-24684 CVE-2026-31806 [Orabug: 39272429]

[2.1.1-5.0.5]
- Fixed CVE-2026-26955 CVE-2026-26956 [Orabug: 39189643]

[2:2.2.0-5.0.3]
- Fixed CVE-2026-22855 CVE-2026-22858 CVE-2026-22859 [Orabug: 39075086]

[2:2.2.0-5.0.1]
- fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533
CVE-2026-23884 [Orabug: 38971897]

[2:2.2.0-5]
- Update: Refactored RPC gateway parser (rhbz#2017944)
+ fix issues discovered by Covscan

[2:2.2.0-4]
- Refactored RPC gateway parser (rhbz#2017944)

[2.1.1-3]
- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)

[2.1.1-2]
- Update to 2.1.1 (#1834286)

[2.0.0-4.rc4]
- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)

[2.0.0-2.rc4]
- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)

Related CVEs

CVE-2026-22852

CVE-2026-22854

CVE-2026-22856

CVE-2026-23732

CVE-2026-23948

CVE-2026-24491

CVE-2026-24675

CVE-2026-24676

CVE-2026-24679

CVE-2026-24684

CVE-2026-31806

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	freerdp-2.1.1-5.0.7.el7_9.src.rpm	68933e7012108536a57fb4b9e8e4a42fc2f38d8e8fa48ed540b9c9b710d7bde2	-	ol7_x86_64_latest_ELS
	freerdp-2.1.1-5.0.7.el7_9.x86_64.rpm	446d2c669af9020969ad6abdae330af1f1ad4d248693e5f75e99fc528a8057a2	-	ol7_x86_64_latest_ELS
	freerdp-devel-2.1.1-5.0.7.el7_9.i686.rpm	08deabb7e1b93eccbbde4c79dcd11d54fe034a22eae62531c499d9eea80d0f37	-	ol7_x86_64_latest_ELS
	freerdp-devel-2.1.1-5.0.7.el7_9.x86_64.rpm	ca3453b20718b0bcba16f77b7e31e2b8192428bbdebd920cfeeba0de5a0ecd89	-	ol7_x86_64_latest_ELS
	freerdp-libs-2.1.1-5.0.7.el7_9.i686.rpm	ab2144a49844224069e8050b5878f3815d9783d66cebca7745366176e134cbe5	-	ol7_x86_64_latest_ELS
	freerdp-libs-2.1.1-5.0.7.el7_9.x86_64.rpm	7b7e31ef67ada8e2631e58ea4cde830ae9fbb5f21ba8422675f1a0138b030d7d	-	ol7_x86_64_latest_ELS
	libwinpr-2.1.1-5.0.7.el7_9.i686.rpm	0bcda69186c5c8ef11c2b75372bdafe0aa35978ea724f1157c2f51343579ac12	-	ol7_x86_64_latest_ELS
	libwinpr-2.1.1-5.0.7.el7_9.x86_64.rpm	b5dd8e94c9b21d0350e25b68a0892a8abcfbc309880afb1c59fc1fc5edddef7e	-	ol7_x86_64_latest_ELS
	libwinpr-devel-2.1.1-5.0.7.el7_9.i686.rpm	f88699d180934cc9e3a4f74c7a5b34acd650b61d53c803501213f487f899981b	-	ol7_x86_64_latest_ELS
	libwinpr-devel-2.1.1-5.0.7.el7_9.x86_64.rpm	d3ea78689f7310dd3fe14f1f0e42dc3f0f0732d7a352025218cb5350b9a7687d	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team