Linux · Security advisory · February 8, 2026

ELSA-2026-2222: Security update for 6 packages

ELSA-2026-2222, released February 8, 2026, fixes 7 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0053
45th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
freerdpol 102:3.10.3-5.el10_1.1
freerdp-develol 102:3.10.3-5.el10_1.1
freerdp-libsol 102:3.10.3-5.el10_1.1
freerdp-serverol 102:3.10.3-5.el10_1.1
libwinprol 102:3.10.3-5.el10_1.1
libwinpr-develol 102:3.10.3-5.el10_1.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-23530 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23531 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23532 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23533 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23534 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23883 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0048 None reported
High CVE-2026-23884 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0048 None reported
Showing 1 to 7 of 7 1