-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-943caf40d9 2026-01-28 01:25:55.182850+00:00 --------------------------------------------------------------------------------
Name : freerdp Product : Fedora 42 Version : 3.21.0 Release : 1.fc42 URL : http://www.freerdp.com/ Summary : Free implementation of the Remote Desktop Protocol (RDP) Description : The xfreerdp & wlfreerdp Remote Desktop Protocol (RDP) clients from the FreeRDP project.
xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox.
-------------------------------------------------------------------------------- Update Information:
Update to 3.21.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 20 2026 Ondrej Holy oholy@redhat.com - 2:3.21.0-1 - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883, CVE-2026-23884) Resolves: rhbz#2430928 * Fri Jan 16 2026 Fedora Release Engineering releng@fedoraproject.org - 2:3.20.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2430895 - CVE-2026-23532 freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2430895 [ 2 ] Bug #2430900 - CVE-2026-23534 freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2430900 [ 3 ] Bug #2430905 - CVE-2026-23531 freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2430905 [ 4 ] Bug #2430911 - CVE-2026-23533 freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2430911 [ 5 ] Bug #2430916 - CVE-2026-23530 freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2430916 [ 6 ] Bug #2430921 - CVE-2026-23883 freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2430921 [ 7 ] Bug #2430930 - CVE-2026-23884 freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2430930 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-943caf40d9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------