{"id":"RLSA-2026:98598","summary":"Critical: freerdp security, bug fix, and enhancement update","details":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU (CVE-2026-85089)\n\n* FreeRDP: FreeRDP: Arbitrary code execution via oversized channel messages in SHOW_PROTOCOL (CVE-2026-91948)\n\n* FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954)\n\n* FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964)\n\n* FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU (CVE-2026-91946)\n\n* freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass (CVE-2026-91949)\n\n* FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956)\n\n* FreeRDP: FreeRDP: Denial of Service via out-of-bounds write in urbdrc client channel (CVE-2026-91951)\n\n* FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963)\n\n* FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption (CVE-2026-91947)\n\n* FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959)\n\n* FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure (CVE-2026-91950)\n\n* FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR (CVE-2026-91960)\n\n* FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953)\n\n* FreeRDP: FreeRDP: Denial of Service due to out-of-bounds read in smartcard response processing (CVE-2026-91945)\n\n* freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242)\n\n* freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect (CVE-2026-109676)\n\n* freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch (CVE-2026-110838)\n\n* freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling (CVE-2026-110830)\n\n* freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding (CVE-2026-110837)\n\n* freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly (CVE-2026-110833)\n\n* freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion (CVE-2026-110839)\n\n* freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser (CVE-2026-111378)\n\n* freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file (CVE-2026-111379)\n\n* freerdp: freerdp: Arbitrary code execution via crafted persistent cache file (CVE-2026-111381)\n\n* freerdp: freerdp: Arbitrary code execution via crafted display frames (CVE-2026-111382)\n\n* freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication (CVE-2026-111880)\n\n* freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats (CVE-2026-114045)\n\n* freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads (CVE-2026-121386)\n\n* freerdp: freerdp: Denial of Service via zero-width graphics reset (CVE-2026-121402)\n\n* freerdp: freerdp: Denial of Service via zero-length dynamic virtual channel messages (CVE-2026-121404)\n\n* freerdp: freerdp: Denial of Service via uncontrolled memory allocation in dynamic virtual channels (CVE-2026-121388)\n\n* freerdp: FreeRDP: Denial of Service via assertion failure in RemoteFX decoder (CVE-2026-121394)\n\nBug Fix(es) and Enhancement(s):\n\n* Rebase FreeRDP to 3.32.2 or newer [rhel-10.3.z] (JIRA:Rocky Linux-277443)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-11-13T12:45:13.980007369Z","published":"2026-11-13T12:06:37.188502Z","upstream":["CVE-2026-109242","CVE-2026-109676","CVE-2026-110830","CVE-2026-110833","CVE-2026-110837","CVE-2026-110838","CVE-2026-110839","CVE-2026-111378","CVE-2026-111379","CVE-2026-111381","CVE-2026-111382","CVE-2026-111880","CVE-2026-114045","CVE-2026-121386","CVE-2026-121388","CVE-2026-121394","CVE-2026-121402","CVE-2026-121404","CVE-2026-121950","CVE-2026-121951","CVE-2026-121952","CVE-2026-121953","CVE-2026-121954","CVE-2026-121955","CVE-2026-121956","CVE-2026-121957","CVE-2026-121958","CVE-2026-121959","CVE-2026-121960","CVE-2026-121961","CVE-2026-121962","CVE-2026-121963","CVE-2026-121964","CVE-2026-85089","CVE-2026-91945","CVE-2026-91946","CVE-2026-91947","CVE-2026-91948","CVE-2026-91949","CVE-2026-91950","CVE-2026-91951","CVE-2026-91953","CVE-2026-91954","CVE-2026-91956","CVE-2026-91959","CVE-2026-91960","CVE-2026-91963","CVE-2026-91964"],"database_specific":{"license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","source_advisory":"RHSA-2026:98598"},"references":[{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:98598"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552996"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533959"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552988"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533930"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533965"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565951"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557974"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552970"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533913"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565949"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553911"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533911"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533957"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533927"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533951"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550539"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553920"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565962"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533954"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2527811"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565870"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533904"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533928"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565959"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533925"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554625"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553907"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552961"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549790"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533942"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533906"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553917"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552978"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567939"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567871"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567941"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567902"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567740"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567629"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567559"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567633"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567558"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567548"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567569"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567613"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567461"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567464"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567521"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:98598"}],"affected":[{"package":{"name":"freerdp","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debugsource","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debugsource","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debugsource","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-server-debuginfo","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-server-debuginfo?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-libs","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-libs?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr-devel","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr-devel?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"CRB"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"freerdp-debugsource","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/freerdp-debugsource?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}},{"package":{"name":"libwinpr","ecosystem":"Rocky Linux:10","purl":"pkg:rpm/rocky-linux/libwinpr?distro=rocky-linux-10&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.32.2-1.el10_2"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:98598.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N"}],"credits":[{"name":"Rocky Enterprise Software Foundation"},{"name":"Red Hat"}]}