Red Hat Updates FreeRDP for CVE-2026-55193 Across RHEL 8.4 and 8.6 Extended Branches
Tech GuruQuick Answer
RHSA-2026:73026 covers the named RHEL 8.4 extended branches; RHSA-2026:73027 covers RHEL 8.6. FreeRDP clients using a malicious TS Gateway can crash or potentially execute attacker code. Update the installed client and library RPMs for the matching stream, not a .src source-RPM identifier.
Confirm Scope And Apply The Supported Fix
What to do now: confirm the host's minor release, architecture and entitlement to Advanced Mission Critical Update Support or Extended Update Support Long-Life Add-On. Use its matching AppStream advisory to update installed freerdp, freerdp-libs and libwinpr packages as applicable. Do not mix 8.4 and 8.6 builds.
Last verified: October 2, 2026 UTC against both Red Hat CSAF records. No repository transaction or remote-desktop session was performed.
Scope And Authority
| Product scope | FreeRDP on entitled RHEL 8.4/8.6 Advanced Mission Critical Update Support or Extended Update Support Long-Life Add-On streams (CSAF AUS/EUS.EXTENSION identifiers) |
|---|---|
| Advisory | RHSA-2026:73026 / RHSA-2026:73027 |
| CVE | CVE-2026-55193 |
| Authoritative release date | RHSA-2026:73026: 2026-09-29 07:06:11 UTC; RHSA-2026:73027: 2026-09-29 07:06:13 UTC |
| Authority revision date | CSAF version 3 generated 2026-10-02 at 04:51:03 UTC / 04:51:04 UTC respectively; generation time is not evidence of a new fix or material advisory change. |
| Affected versions | The RHEL 8.4 and 8.6 AppStream AUS or EUS Extension branches identified by RHSA-2026:73026 and RHSA-2026:73027 before their advisory-listed fixed builds. |
| Fixed version | Installed FreeRDP-family runtime RPMs: 2:2.2.0-14.el8_4.4 for 8.4/RHSA-2026:73026; 2:2.2.0-7.el8_6.13 for 8.6/RHSA-2026:73027. Select the advisory-listed package and architecture, not a source RPM. |
| CVSS base score | 8.8 (official CVSS v3.1) |
| CVSS severity | High |
| Exploitation status | Not stated by the authority; no exploitation claim is inferred. |
What Changed
Red Hat corrected a FreeRDP TS Gateway heap-buffer overflow that can crash a client and may permit arbitrary code execution when a client processes a malicious gateway response fragment.
What To Validate Now
- Match the stream. Record RHEL minor release, enabled entitled repository and installed client/library architectures. Match 73026 to 8.4 or 73027 to 8.6 before selecting packages.
- Apply runtime updates. Use the matching Red Hat repository transaction and preserve its package list. A downloaded source RPM or an updated gateway server does not prove the Linux client is fixed.
- Start an updated client. Save remote work and reopen the client after updating. Test a connection through an approved TS Gateway, retaining certificate validation; do not connect to a suspect gateway to test vulnerability behavior.
- Record the actual path. Keep installed binary versions and the approved gateway/session result. Direct RDP success alone does not exercise the affected TS Gateway path. Red Hat lists no qualifying workaround in these records.
Operational Cautions
These are branch-specific extended-support fixes. Confirm entitlement and repository configuration before deployment, preserve configuration and rollback options, and do not treat the CVSS score as evidence of exploitation.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
