[El-errata] ELSA-2026-20546 Moderate: Oracle Linux 7 freerdp security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-20546

http://linux.oracle.com/errata/ELSA-2026-20546.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
freerdp-2.1.1-5.0.9.el7_9.x86_64.rpm
freerdp-devel-2.1.1-5.0.9.el7_9.i686.rpm
freerdp-devel-2.1.1-5.0.9.el7_9.x86_64.rpm
freerdp-libs-2.1.1-5.0.9.el7_9.i686.rpm
freerdp-libs-2.1.1-5.0.9.el7_9.x86_64.rpm
libwinpr-2.1.1-5.0.9.el7_9.i686.rpm
libwinpr-2.1.1-5.0.9.el7_9.x86_64.rpm
libwinpr-devel-2.1.1-5.0.9.el7_9.i686.rpm
libwinpr-devel-2.1.1-5.0.9.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/freerdp-2.1.1-5.0.9.el7_9.src.rpm

Related CVEs:

CVE-2026-25952
CVE-2026-26986
CVE-2026-27951
CVE-2026-29775
CVE-2026-31883
CVE-2026-31884
CVE-2026-31885
CVE-2026-33985




Description of changes:

[2.1.1-5.0.9]
- Fixed CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775
  CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985
  [Orabug: 39440279]

[2.1.1-5.0.7]
- Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732
  CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676 CVE-2026-24679
  CVE-2026-24684 CVE-2026-31806 [Orabug: 39272429]

[2.1.1-5.0.5]
- Fixed CVE-2026-26955 CVE-2026-26956 [Orabug: 39189643]

[2:2.2.0-5.0.3]
- Fixed CVE-2026-22855 CVE-2026-22858 CVE-2026-22859 [Orabug: 39075086]

[2:2.2.0-5.0.1]
- fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533
  CVE-2026-23884 [Orabug: 38971897]

[2:2.2.0-5]
- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan

[2:2.2.0-4]
- Refactored RPC gateway parser (rhbz#2017944)

[2.1.1-3]
- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)

[2.1.1-2]
- Update to 2.1.1 (#1834286)

[2.0.0-4.rc4]
- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)