RLSA-2026:97219

See a problem?
Please try reporting it to the source first.
Source
https://errata.rockylinux.org/RLSA-2026:97219
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2026:97219
Upstream
Published
2026-11-13T06:06:59Z
Modified
2026-11-13T06:30:03Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Moderate: freerdp security, bug fix, and enhancement update
Details

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951)

Bug Fix(es) and Enhancement(s):

  • Update freerdp to the latest upstream stable release (JIRA:Rocky Linux-80426)

  • FreeRDP does not create context for hostnames longer than 31 characters (JIRA:Rocky Linux-143809)

  • SSL warnings under FIPS (JIRA:Rocky Linux-140202)

  • [RFE] Add RDP Smart Card Redirection Support (MS?RDPESC) to Enable Remote (Virtualized) SmartCard?Based PKINIT Authentication (JIRA:Rocky Linux-171999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

Database specific 
{
    "license": "CC-BY-4.0",
    "license_url": "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory": "RHSA-2026:97219"
}
References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:10
freerdp-libs-debuginfo

Package

Name
freerdp-libs-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-debuginfo

Package

Name
libwinpr-debuginfo
Purl
pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-devel

Package

Name
libwinpr-devel
Purl
pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debugsource

Package

Name
freerdp-debugsource
Purl
pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server

Package

Name
freerdp-server
Purl
pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp

Package

Name
freerdp
Purl
pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-libs

Package

Name
freerdp-libs
Purl
pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debuginfo

Package

Name
freerdp-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr

Package

Name
libwinpr
Purl
pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-devel

Package

Name
freerdp-devel
Purl
pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server-debuginfo

Package

Name
freerdp-server-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debugsource

Package

Name
freerdp-debugsource
Purl
pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server

Package

Name
freerdp-server
Purl
pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp

Package

Name
freerdp
Purl
pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr

Package

Name
libwinpr
Purl
pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-devel

Package

Name
freerdp-devel
Purl
pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-libs-debuginfo

Package

Name
freerdp-libs-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debuginfo

Package

Name
freerdp-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-debuginfo

Package

Name
libwinpr-debuginfo
Purl
pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-libs

Package

Name
freerdp-libs
Purl
pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-devel

Package

Name
libwinpr-devel
Purl
pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server-debuginfo

Package

Name
freerdp-server-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debugsource

Package

Name
freerdp-debugsource
Purl
pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debuginfo

Package

Name
freerdp-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp

Package

Name
freerdp
Purl
pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr

Package

Name
libwinpr
Purl
pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-devel

Package

Name
freerdp-devel
Purl
pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-libs-debuginfo

Package

Name
freerdp-libs-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-debuginfo

Package

Name
libwinpr-debuginfo
Purl
pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-devel

Package

Name
libwinpr-devel
Purl
pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server-debuginfo

Package

Name
freerdp-server-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-libs

Package

Name
freerdp-libs
Purl
pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server

Package

Name
freerdp-server
Purl
pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-debuginfo

Package

Name
libwinpr-debuginfo
Purl
pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-devel

Package

Name
freerdp-devel
Purl
pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-libs

Package

Name
freerdp-libs
Purl
pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debuginfo

Package

Name
freerdp-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp

Package

Name
freerdp
Purl
pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr

Package

Name
libwinpr
Purl
pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server-debuginfo

Package

Name
freerdp-server-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-libs-debuginfo

Package

Name
freerdp-libs-debuginfo
Purl
pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-debugsource

Package

Name
freerdp-debugsource
Purl
pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
freerdp-server

Package

Name
freerdp-server
Purl
pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"
libwinpr-devel

Package

Name
libwinpr-devel
Purl
pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:3.28.0-4.el10_3
Database specific
Show details 
{
    "yum_repository": "CRB"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97219.json"