ELSA-2026-36203

ELSA-2026-36203 - freerdp security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[2:3.10.3-12.6]
- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
CVE-2026-44422, CVE-2026-45700)
Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093

[2:3.10.3-12.5]
- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
Resolves: RHEL-159848

[2:3.10.3-12.4]
- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931

Related CVEs

CVE-2026-40033

CVE-2026-44420

CVE-2026-44421

CVE-2026-44422

CVE-2026-45700

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	freerdp-3.10.3-12.el10_2.6.src.rpm	7731d59cf5b0ade03bae35e9deb0462660462761e1cdf15c9fd33478e1802036	-	ol10_aarch64_appstream
	freerdp-3.10.3-12.el10_2.6.src.rpm	7731d59cf5b0ade03bae35e9deb0462660462761e1cdf15c9fd33478e1802036	-	ol10_aarch64_codeready_builder
	freerdp-3.10.3-12.el10_2.6.aarch64.rpm	36eaf1ac9e3f3c436302673233f242f1e8ef5e81585827832bb673ad75af9a07	-	ol10_aarch64_appstream
	freerdp-devel-3.10.3-12.el10_2.6.aarch64.rpm	46faea7af330383b4f681ea2bd1070d7573f4cd6dc57f7c02879e131192651ca	-	ol10_aarch64_codeready_builder
	freerdp-libs-3.10.3-12.el10_2.6.aarch64.rpm	59bde6b1837de5733351e15f1d53ca0c9909e16a8374804afe7de9b258175cae	-	ol10_aarch64_appstream
	freerdp-server-3.10.3-12.el10_2.6.aarch64.rpm	67166a16f580454ac9f787a6ef317be2107fda56a27658cacf82de0546447bbf	-	ol10_aarch64_codeready_builder
	libwinpr-3.10.3-12.el10_2.6.aarch64.rpm	bdaff95bb72f5a6e82e95b93e7e7db8619c0bdbb3af92f8df48b4032ec7cf3b6	-	ol10_aarch64_appstream
	libwinpr-devel-3.10.3-12.el10_2.6.aarch64.rpm	47c75fe861f7c682a5f8d0080bd9f92eb7c94bfe5cd88bbb0772b4904b09c2e1	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	freerdp-3.10.3-12.el10_2.6.src.rpm	7731d59cf5b0ade03bae35e9deb0462660462761e1cdf15c9fd33478e1802036	-	ol10_x86_64_appstream
	freerdp-3.10.3-12.el10_2.6.src.rpm	7731d59cf5b0ade03bae35e9deb0462660462761e1cdf15c9fd33478e1802036	-	ol10_x86_64_codeready_builder
	freerdp-3.10.3-12.el10_2.6.x86_64.rpm	66c08c79d8ad945109bdab73f72687fa54fe8ca4b68bbfcbb6ce48f144530ed4	-	ol10_x86_64_appstream
	freerdp-devel-3.10.3-12.el10_2.6.x86_64.rpm	15f060859fc94d6e2e47f2ed1c91b2dcbb6a47ee3b31a38fe4b94af4cf9521ae	-	ol10_x86_64_codeready_builder
	freerdp-libs-3.10.3-12.el10_2.6.x86_64.rpm	6afd7e2b138d3525da098960abc5129fede80b13cbe894ebc8ec53a89db3e4d8	-	ol10_x86_64_appstream
	freerdp-server-3.10.3-12.el10_2.6.x86_64.rpm	29fee9920e1c1c3bdedda6073e93d7d01de718c075ed64c5ebd7e8b4b52f28ff	-	ol10_x86_64_codeready_builder
	libwinpr-3.10.3-12.el10_2.6.x86_64.rpm	24dc0a8bfad21fd21ab60378960a344275a14ff8ed93640a11b4dc98e7143194	-	ol10_x86_64_appstream
	libwinpr-devel-3.10.3-12.el10_2.6.x86_64.rpm	3f5bbd8a99b883d3f79647fcf9c4be69e3561cfeca5b711fd7cddb2045a9804d	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team