OPENSUSE-SU-2026:20339-1: freerdp security update

OPENSUSE-SU-2026:20339-1, released March 10, 2026, fixes 44 CVEs in freerdp (version 3.22.0-160000.1.1). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0372

89th percentile

Priority of the 44 CVEs

Patch now 0
                                Urgent 1
                                High 39
                                Routine 4

Fixed package versions

Product	Release	Fixed in
freerdp	opensuse-leap 16.0	3.22.0-160000.1.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-24677	freerdp3: FreeRDP is a free implementation of the Remote Desktop Protocol	9.1	0.0055	None reported
High	CVE-2024-32459	libwinpr-tools3-3: FreeRDP is a free implementation of the Remote Desktop Protocol	9.8	0.0372	None reported
High	CVE-2024-32039	libfreerdp-client3-3: FreeRDP is a free implementation of the Remote Desktop Protocol	9.8	0.0228	None reported
High	CVE-2024-32458	freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol	9.8	0.0194	None reported
High	CVE-2024-32041	freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol	9.8	0.0193	None reported
High	CVE-2024-32040	freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol	9.8	0.0191	None reported
High	CVE-2024-32460	libfreerdp3-3: FreeRDP is a free implementation of the Remote Desktop Protocol	9.8	0.0191	None reported
High	CVE-2024-32658	freerdp: This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in `freerdp_bitmap_plan...	9.8	0.0136	None reported
High	CVE-2024-32661	freerdp: This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in `freerdp_bitmap_plan...	7.5	0.0121	None reported
High	CVE-2024-32659	freerdp: This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in `freerdp_bitmap_plan...	9.8	0.0118	None reported
High	CVE-2024-32660	freerdp: This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in `freerdp_bitmap_plan...	7.5	0.0117	None reported
High	CVE-2024-22211	freerdp: This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in `freerdp_bitmap_plan...	9.8	0.0108	None reported
High	CVE-2026-22855	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license	9.1	0.0089	None reported
High	CVE-2026-22859	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license	9.1	0.0089	None reported
High	CVE-2026-22853	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol	9.8	0.0078	None reported
High	CVE-2026-22858	freerdp3-proxy: FreeRDP is a free implementation of the Remote Desktop Protocol	9.1	0.0070	None reported
High	CVE-2026-24678	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol	8.1	0.0070	None reported
High	CVE-2026-24684	freerdp2-wayland: FreeRDP is a free implementation of the Remote Desktop Protocol	8.8	0.0060	None reported
High	CVE-2026-23732	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license	8.8	0.0058	None reported
High	CVE-2026-24679	freerdp2-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol	9.1	0.0055	None reported
High	CVE-2025-4478	freerdp3-x11: A flaw was found in the FreeRDP used by Anaconda's remote install feature,where a crafted RDP packet could trigger a...	7.1	0.0054	None reported
High	CVE-2026-23530	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license	9.8	0.0053	None reported
High	CVE-2026-23531	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license	9.8	0.0053	None reported
High	CVE-2026-23532	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license	9.8	0.0053	None reported
High	CVE-2026-23533	freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license	9.8	0.0053	None reported

Also fixes CVE-2026-24677

ALAS2023-2026-1454
freerdp, freerdp-debuginfo, freerdp-debugsource and 8 more on amzn 2023
freerdp3-proxy 3.16.0+dfsg-2ubuntu0.1
freerdp3-proxy on Ubuntu 25.10 (questing)
freerdp3-proxy-modules 3.16.0+dfsg-2ubuntu0.1
freerdp3-proxy-modules on Ubuntu 25.10 (questing)
freerdp3-sdl 3.16.0+dfsg-2ubuntu0.1
freerdp3-sdl on Ubuntu 25.10 (questing)
freerdp3-shadow-x11 3.16.0+dfsg-2ubuntu0.1
freerdp3-shadow-x11 on Ubuntu 25.10 (questing)
freerdp3-wayland 3.16.0+dfsg-2ubuntu0.1
freerdp3-wayland on Ubuntu 25.10 (questing)
freerdp3-x11 3.16.0+dfsg-2ubuntu0.1
freerdp3-x11 on Ubuntu 25.10 (questing)
libfreerdp-client3-3 3.16.0+dfsg-2ubuntu0.1
libfreerdp-client3-3 on Ubuntu 25.10 (questing)

Vendor advisory

https://osv.dev/vulnerability/openSUSE-SU-2026:20339-1

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/opensuse-su-2026-20339-1">OPENSUSE-SU-2026:20339-1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.