# ALAS2023-2026-2111: Security update for 11 packages ALAS2023-2026-2111, released August 31, 2026, fixes 22 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-2111 - Platform: Linux - Released: Aug 31, 2026 - Priority: High (Closes CVE-2026-67298, high severity) - CVEs: 22, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-2111.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [freerdp](https://patchblox.com/security/data/product/linux/freerdp.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [freerdp-debuginfo](https://patchblox.com/security/data/product/linux/freerdp-debuginfo.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [freerdp-debugsource](https://patchblox.com/security/data/product/linux/freerdp-debugsource.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [freerdp-devel](https://patchblox.com/security/data/product/linux/freerdp-devel.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [freerdp-libs](https://patchblox.com/security/data/product/linux/freerdp-libs.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [freerdp-libs-debuginfo](https://patchblox.com/security/data/product/linux/freerdp-libs-debuginfo.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [freerdp-server](https://patchblox.com/security/data/product/linux/freerdp-server.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [freerdp-server-debuginfo](https://patchblox.com/security/data/product/linux/freerdp-server-debuginfo.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [libwinpr](https://patchblox.com/security/data/product/linux/libwinpr.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [libwinpr-debuginfo](https://patchblox.com/security/data/product/linux/libwinpr-debuginfo.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | | [libwinpr-devel](https://patchblox.com/security/data/product/linux/libwinpr-devel.md) | amzn 2023 | 2:3.6.3-1.amzn2023.0.15 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-67298](https://patchblox.com/security/data/cve/CVE-2026-67298.md) | High | freerdp3: FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_serv... | 8.8 | 0.0072 | | | [CVE-2026-67301](https://patchblox.com/security/data/cve/CVE-2026-67301.md) | High | freerdp3: FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC... | 8.8 | 0.0065 | | | [CVE-2026-67304](https://patchblox.com/security/data/cve/CVE-2026-67304.md) | High | freerdp3: FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup w... | 8.8 | 0.0065 | | | [CVE-2026-67297](https://patchblox.com/security/data/cve/CVE-2026-67297.md) | High | freerdp3: FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP respon... | 8.8 | 0.0052 | | | [CVE-2026-73241](https://patchblox.com/security/data/cve/CVE-2026-73241.md) | High | freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol | 8.8 | 0.0047 | | | [CVE-2026-67289](https://patchblox.com/security/data/cve/CVE-2026-67289.md) | High | freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license | 8.1 | 0.0043 | | | [CVE-2026-67288](https://patchblox.com/security/data/cve/CVE-2026-67288.md) | High | freerdp3: FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that acce... | 8.8 | 0.0043 | | | [CVE-2026-67291](https://patchblox.com/security/data/cve/CVE-2026-67291.md) | High | freerdp3: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragme... | 8.8 | 0.0041 | | | [CVE-2026-73242](https://patchblox.com/security/data/cve/CVE-2026-73242.md) | High | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.1 | 0.0040 | | | [CVE-2026-67299](https://patchblox.com/security/data/cve/CVE-2026-67299.md) | High | freerdp3: FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_OR... | 8.1 | 0.0040 | | | [CVE-2026-68580](https://patchblox.com/security/data/cve/CVE-2026-68580.md) | High | freerdp3: FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across... | 8.1 | 0.0030 | | | [CVE-2026-64624](https://patchblox.com/security/data/cve/CVE-2026-64624.md) | High | freerdp3-shadow-x11: FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing th... | 8.1 | 0.0018 | | | [CVE-2026-72745](https://patchblox.com/security/data/cve/CVE-2026-72745.md) | High | freerdp3: FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberos_DecryptMessage() (winpr/libwinpr/sspi/Kerbe... | 7.5 | n/a | | | [CVE-2026-72746](https://patchblox.com/security/data/cve/CVE-2026-72746.md) | High | freerdp3: FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake | n/a | n/a | | | [CVE-2026-67302](https://patchblox.com/security/data/cve/CVE-2026-67302.md) | Routine | freerdp3-shadow-x11: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera... | 6.5 | 0.0050 | | | [CVE-2026-67303](https://patchblox.com/security/data/cve/CVE-2026-67303.md) | Routine | freerdp3: FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_pr... | n/a | 0.0042 | | | [CVE-2026-67306](https://patchblox.com/security/data/cve/CVE-2026-67306.md) | Routine | freerdp3: FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder... | n/a | 0.0038 | | | [CVE-2026-67294](https://patchblox.com/security/data/cve/CVE-2026-67294.md) | Routine | freerdp3: FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client... | n/a | 0.0036 | | | [CVE-2026-67295](https://patchblox.com/security/data/cve/CVE-2026-67295.md) | Routine | freerdp3: FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers... | n/a | 0.0036 | | | [CVE-2026-67300](https://patchblox.com/security/data/cve/CVE-2026-67300.md) | Routine | freerdp3: FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for... | n/a | 0.0034 | | | [CVE-2026-66402](https://patchblox.com/security/data/cve/CVE-2026-66402.md) | Routine | freerdp3: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses... | n/a | 0.0034 | | | [CVE-2026-67293](https://patchblox.com/security/data/cve/CVE-2026-67293.md) | Routine | freerdp3: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability | n/a | 0.0024 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.