Back Linuxsecurity

Fedora 44 FreeRDP Important DoS Information Disclosure Fix 2026

Linuxsecurity •LinuxSecurity Advisories • July 15, 2026

* Mon Jul 13 2026 Ondrej Holy - 2:3.28.0-1 - Update to 3.28.0 (CVE-2026-57156, CVE-2026-57157, CVE-2026-57158) Resolves: rhbz#2497324

[ 1 ] Bug #2499199 - CVE-2026-57158 freerdp: FreeRDP: Information disclosure via truncated RDPGFX planar payload [fedora-all] [ 2 ] Bug #2499200 - CVE-2026-57157 freerdp: FreeRDP: Out-of-bounds read leads to information disclosure and denial of service [fedora-all] [ 3 ] Bug #2499226 - CVE-2026-57156 freerdp: FreeRDP: Arbitrary code execution or denial of service via integer overflow in RDP message processing [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-931f893f1b' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical DoS and Information Disclosure Vulnerabilities in FreeRDP for Fedora On July 10, 2026, three critical vulnerabilities (CVE-2026-57156, CVE-2026-57157, CVE-2026-57158) were published affecting FreeRDP, a remote desktop protocol library used in Fedora systems. These vulnerabilities allow for arbitrary code execution, denial of service, and information disclosure through various attack vectors. Specifically, CVE-2026-57156 involves an integer overflow in RDP message processing, while CVE-2026-57157 and CVE-2026-57158 relate to out-of-bounds reads and truncated payloads. The vulnerabilities were patched in FreeRDP version 3.28.0, released on July 13, 2026. Users are advised to update their systems using the provided dnf command to mitigate these risks. The vulnerabilities affect all Fedora users utilizing FreeRDP, posing a significant threat to system integrity and confidentiality. 6 sources 71

Extracted Entities

Fedora 44 FreeRDP Important DoS Information Disclosure Fix 2026

The full story

Extracted Entities

Attack Types (2)

Companies (1)

CVEs (3)

CWE Weaknesses (3)