RHSA-2026:61378
- Source
- https://access.redhat.com/errata/RHSA-2026:61378
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2026:61378.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2026:61378
- Upstream
- Published
- 2026-09-01T10:28:23Z
- Modified
- 2026-09-01T10:47:46.911125857Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: freerdp security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2026:61378
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2509986
- https://bugzilla.redhat.com/show_bug.cgi?id=2509994
- https://bugzilla.redhat.com/show_bug.cgi?id=2510001
- https://bugzilla.redhat.com/show_bug.cgi?id=2510010
- https://bugzilla.redhat.com/show_bug.cgi?id=2510029
- https://bugzilla.redhat.com/show_bug.cgi?id=2510034
- https://bugzilla.redhat.com/show_bug.cgi?id=2510041
- https://bugzilla.redhat.com/show_bug.cgi?id=2514346
- https://bugzilla.redhat.com/show_bug.cgi?id=2514349
- https://bugzilla.redhat.com/show_bug.cgi?id=2519822
- https://bugzilla.redhat.com/show_bug.cgi?id=2519824
- https://bugzilla.redhat.com/show_bug.cgi?id=2519826
- https://bugzilla.redhat.com/show_bug.cgi?id=2519828
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61378.json
- https://access.redhat.com/security/cve/CVE-2026-55194
- https://www.cve.org/CVERecord?id=CVE-2026-55194
- https://nvd.nist.gov/vuln/detail/CVE-2026-55194
- https://github.com/FreeRDP/FreeRDP/commit/9f2da52c2341cc14a96ad12e69c5b83d0bcd8b5a
- https://github.com/FreeRDP/FreeRDP/pull/12873
- https://github.com/FreeRDP/FreeRDP/releases/tag/3.27.0
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9gxm-3mf5-f5cx
- https://access.redhat.com/security/cve/CVE-2026-63633
- https://www.cve.org/CVERecord?id=CVE-2026-63633
- https://nvd.nist.gov/vuln/detail/CVE-2026-63633
- https://github.com/FreeRDP/FreeRDP/commit/0ed1f95d36913581cf31124f94eb5843d4263eae
- https://github.com/FreeRDP/FreeRDP/pull/12993
- https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-72j9-356v-88xq
- https://access.redhat.com/security/cve/CVE-2026-63652
- https://www.cve.org/CVERecord?id=CVE-2026-63652
- https://nvd.nist.gov/vuln/detail/CVE-2026-63652
- https://github.com/FreeRDP/FreeRDP/commit/caf653c0ba1c75ec8f298d1baa59770102a5d14c
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9g22-w2gr-vcmp
- https://access.redhat.com/security/cve/CVE-2026-67288
- https://www.cve.org/CVERecord?id=CVE-2026-67288
- https://nvd.nist.gov/vuln/detail/CVE-2026-67288
- https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f
- https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3
- https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-smartcard-cache
- https://access.redhat.com/security/cve/CVE-2026-67291
- https://www.cve.org/CVERecord?id=CVE-2026-67291
- https://nvd.nist.gov/vuln/detail/CVE-2026-67291
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6
- https://www.vulncheck.com/advisories/freerdp-before-heap-out-of-bounds-read-via-glyph-fragment-add
- https://access.redhat.com/security/cve/CVE-2026-67296
- https://www.cve.org/CVERecord?id=CVE-2026-67296
- https://nvd.nist.gov/vuln/detail/CVE-2026-67296
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jm8r-22j6-4m4v
- https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-rdpei-pdu
- https://access.redhat.com/security/cve/CVE-2026-67297
- https://www.cve.org/CVERecord?id=CVE-2026-67297
- https://nvd.nist.gov/vuln/detail/CVE-2026-67297
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c6r-4pr4-9x8m
- https://www.vulncheck.com/advisories/freerdp-before-resource-exhaustion-via-chunked-http-response
- https://access.redhat.com/security/cve/CVE-2026-67298
- https://www.cve.org/CVERecord?id=CVE-2026-67298
- https://nvd.nist.gov/vuln/detail/CVE-2026-67298
- https://github.com/FreeRDP/FreeRDP/commit/46848765f2a1134f8652f8760eefb5e85d64a9b8
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmvw-52ph-q5pv
- https://www.vulncheck.com/advisories/freerdp-heap-buffer-overflow-via-rail-orderlength-underflow
- https://access.redhat.com/security/cve/CVE-2026-67301
- https://www.cve.org/CVERecord?id=CVE-2026-67301
- https://nvd.nist.gov/vuln/detail/CVE-2026-67301
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w
- https://www.vulncheck.com/advisories/freerdp-before-out-of-bounds-read-via-polygon-async-message-proxy
- https://access.redhat.com/security/cve/CVE-2026-67304
- https://www.cve.org/CVERecord?id=CVE-2026-67304
- https://nvd.nist.gov/vuln/detail/CVE-2026-67304
- https://github.com/FreeRDP/FreeRDP/commit/1cc783d4c78bd2f66d3a8582dfe70a663d141444
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78jj-45vh-jpm5
- https://www.vulncheck.com/advisories/freerdp-before-null-dereference-via-smartcard-cleanup
- https://access.redhat.com/security/cve/CVE-2026-69159
- https://www.cve.org/CVERecord?id=CVE-2026-69159
- https://nvd.nist.gov/vuln/detail/CVE-2026-69159
- https://github.com/FreeRDP/FreeRDP/commit/75a1ec61d444179ea64a4ec0835214cb9c4f7c18
- https://github.com/FreeRDP/FreeRDP/pull/13016
- https://github.com/FreeRDP/FreeRDP/releases/tag/3.29.0
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3
- https://access.redhat.com/security/cve/CVE-2026-73241
- https://www.cve.org/CVERecord?id=CVE-2026-73241
- https://nvd.nist.gov/vuln/detail/CVE-2026-73241
- https://github.com/FreeRDP/FreeRDP/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695
- https://github.com/FreeRDP/FreeRDP/pull/13065
- https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rqgv-grx4-xm6x
- https://access.redhat.com/security/cve/CVE-2026-73242
- https://www.cve.org/CVERecord?id=CVE-2026-73242
- https://nvd.nist.gov/vuln/detail/CVE-2026-73242
- https://github.com/FreeRDP/FreeRDP/commit/0adf5e30d01be84e190a359a7bdd37bc51d740cc
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vv64-95pc-vj9v