Red Hat Product Security has released an important security update for the freerdp package in Red Hat Enterprise Linux 8.8 to fix three vulnerabilities: two heap-buffer-overflows (CVE-2026-22855 and CVE-2026-22859) and one global-buffer-overflow (CVE-2026-22858). FreeRDP is an open-source RDP client used to connect to various RDP servers. These buffer overflow flaws could potentially lead to memory corruption issues. The advisory references updated freerdp packages (version 2.2.0-12.el8_8.2) that remediate these vulnerabilities. The update applies to multiple Red Hat Enterprise Linux 8.8 variants including Extended Update Support Extension, Telecommunications Update Service, and Update Services for SAP Solutions. The vendor rates the impact as Important but does not provide CVSS scores. No exploits in the wild are currently known.

The vulnerabilities involve heap and global buffer overflows in the freerdp client, which could lead to memory corruption. While the exact impact is not detailed in the advisory, buffer overflows generally pose risks such as application crashes or potential code execution. No known exploits in the wild have been reported. The security impact is rated Important by Red Hat, indicating a significant but not critical threat level.

Red Hat has released updated freerdp packages for Red Hat Enterprise Linux 8.8 and related update services that fix these vulnerabilities. Users should apply the security update RHSA-2026:4440 promptly to remediate the issues. Detailed update instructions are available at https://access.redhat.com/articles/11258. Since an official fix is available, applying the vendor-provided update is the recommended mitigation. No additional or alternative mitigations are indicated by the vendor advisory.