{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/vex/2026/cve-2026-22858-els_os-cloudlinux7els.json" } ], "tracking": { "current_release_date": "2026-10-25T22:14:58Z", "generator": { "date": "2026-10-25T22:14:58Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-22858-ELS_OS-CLOUDLINUX7ELS", "initial_release_date": "2026-01-14T18:16:00Z", "revision_history": [ { "date": "2026-01-14T18:16:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-25T04:15:25Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-10-25T22:14:58Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Security update on CVE-2026-22858" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_id": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-libs@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_id": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-devel@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_id": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_id": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_id": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr-devel@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=x86_64" } } }, { "category": "product_version", "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-libs@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_id": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-libs@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=i686" } } }, { "category": "product_version", "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_id": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-devel@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=i686" } } }, { "category": "product_version", "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_id": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=i686" } } }, { "category": "product_version", "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_id": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=i686" } } }, { "category": "product_version", "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_id": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr-devel@2.1.1-5.0.9.el7_9.tuxcare.els9?arch=i686" } } }, { "category": "product_version", "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-libs@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64" }, "product_reference": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686" }, "product_reference": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64" }, "product_reference": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686" }, "product_reference": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64" }, "product_reference": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686" }, "product_reference": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64" }, "product_reference": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686" }, "product_reference": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686" }, "product_reference": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64" }, "product_reference": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-22858", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c <= 0 can be optimized into a simple c != 0 check. As a result, non-ASCII bytes (e.g., 0x80-0xFF) may bypass the intended range restriction and be used as an index into a global lookup table, causing out-of-bounds access. This vulnerability is fixed in 3.20.1.", "title": "Vulnerability description" }, { "category": "other", "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.", "title": "Statement" } ], "product_status": { "known_not_affected": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-22858" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1", "url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmqf-m84q-x896", "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmqf-m84q-x896" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19033", "url": "https://access.redhat.com/errata/RHSA-2026:19033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3067", "url": "https://access.redhat.com/errata/RHSA-2026:3067" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3068", "url": "https://access.redhat.com/errata/RHSA-2026:3068" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3334", "url": "https://access.redhat.com/errata/RHSA-2026:3334" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3975", "url": "https://access.redhat.com/errata/RHSA-2026:3975" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4121", "url": "https://access.redhat.com/errata/RHSA-2026:4121" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4433", "url": "https://access.redhat.com/errata/RHSA-2026:4433" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4437", "url": "https://access.redhat.com/errata/RHSA-2026:4437" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4438", "url": "https://access.redhat.com/errata/RHSA-2026:4438" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4439", "url": "https://access.redhat.com/errata/RHSA-2026:4439" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4440", "url": "https://access.redhat.com/errata/RHSA-2026:4440" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4446", "url": "https://access.redhat.com/errata/RHSA-2026:4446" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4471", "url": "https://access.redhat.com/errata/RHSA-2026:4471" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4489", "url": "https://access.redhat.com/errata/RHSA-2026:4489" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-22858", "url": "https://access.redhat.com/security/cve/CVE-2026-22858" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2429649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429649" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22858.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22858.json" } ], "release_date": "2026-01-14T18:16:00Z", "threats": [ { "category": "impact", "details": "Critical" }, { "category": "impact", "date": "2026-10-15T02:51:25.503278Z", "details": "critical", "product_ids": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els9.x86_64" ] } ] } ] }