Fedora Account System
Red Hat Associate
Red Hat Customer
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the proxy CONNECT request line and Host header by http_proxy_connect() without filtering. A malicious or compromised RDP server can send a crafted redirection PDU containing embedded control characters to inject arbitrary headers/requests into the HTTP proxy CONNECT request.
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle. Changing version to 45.
FEDORA-2026-1c0deda1e7 (freerdp2-2.11.7-16.fc46) has been submitted as an update to Fedora 46. https://bodhi.fedoraproject.org/updates/FEDORA-2026-1c0deda1e7
FEDORA-2026-1c0deda1e7 (freerdp2-2.11.7-16.fc46) has been pushed to the Fedora 46 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-20b7d49f70 (freerdp2-2.11.7-16.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-20b7d49f70
FEDORA-2026-d91338eea8 (freerdp2-2.11.7-16.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-d91338eea8
FEDORA-2026-3fe3e3ae10 (freerdp2-2.11.7-16.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-3fe3e3ae10
FEDORA-2026-d91338eea8 has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-d91338eea8` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-d91338eea8 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-3fe3e3ae10 has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-3fe3e3ae10` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-3fe3e3ae10 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-20b7d49f70 has been pushed to the Fedora 45 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-20b7d49f70` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-20b7d49f70 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-d91338eea8 (freerdp2-2.11.7-16.fc44) has been pushed to the Fedora 44 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-3fe3e3ae10 (freerdp2-2.11.7-16.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-20b7d49f70 (freerdp2-2.11.7-16.fc45) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report.