Linux · Security advisory · February 5, 2026

RHSA-2026:2048: Security update for 5 packages

RHSA-2026:2048, released February 5, 2026, fixes 7 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0053
45th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
freerdpRHEL 92:2.11.7-1.el9_7.1
freerdp-develRHEL 92:2.11.7-1.el9_7.1
freerdp-libsRHEL 92:2.11.7-1.el9_7.1
libwinprRHEL 92:2.11.7-1.el9_7.1
libwinpr-develRHEL 92:2.11.7-1.el9_7.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-23530 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23531 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23532 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23533 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23534 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0053 None reported
High CVE-2026-23883 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0048 None reported
High CVE-2026-23884 freerdp: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license 9.8 0.0048 None reported
Showing 1 to 7 of 7 1