Red Hat Product Errata RHSA-2026:8458 - Security Advisory
Issued:
2026-04-16
Updated:
2026-04-16

RHSA-2026:8458 - Security Advisory

Synopsis

Important: freerdp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for freerdp is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

  • FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
  • FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

  • BZ - 2453219 - CVE-2026-33984 FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data
  • BZ - 2453220 - CVE-2026-33983 FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages

Red Hat Enterprise Linux for x86_64 10

SRPM
freerdp-3.10.3-5.el10_1.6.src.rpm SHA-256: 4ba79a9aeac6491f19cda45880ec51a32556fd56752d8d2f4593eb5fa08f56da
x86_64
freerdp-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: ec0ed93604b2231df7386157d2430909fffa871a5d89e68f1a66441432b20284
freerdp-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: c286f58351aafc1e4895257e856266567f4e2726f7a87579d4d848896a500e28
freerdp-debugsource-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: be2c8beeeb3c08bbc18aa4a9a9dd9f7c4c93ced5de9579527c0728f93418d2ba
freerdp-libs-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: ebb6ac108a016a775e6e1d05a94ae8575790c82d820033aef0c1c39cead63366
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 7503ddd73fafe99d75de9cfa9badbf2b4d6e85d97c899198d187f8f0b4fdd963
freerdp-server-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 84b3446dde300686f51f464eca3178a87c69224ace84d092000131d3dac44830
libwinpr-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 99d94e76bddd337700b13d4df62eae1c36f269c87d1bda09d05d12cd0afe0022
libwinpr-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 7b977ce057860cab43caa95dd1fd995efa4a6a00f51e30cd6453b46cd22502c8

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
freerdp-3.10.3-5.el10_1.6.src.rpm SHA-256: 4ba79a9aeac6491f19cda45880ec51a32556fd56752d8d2f4593eb5fa08f56da
s390x
freerdp-3.10.3-5.el10_1.6.s390x.rpm SHA-256: a6fab194bb7d2251942bbcb6eeecc030798ea5553bac8af9e6a866c784f7c648
freerdp-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 6757866adc61186de72eb40f6a4e019dd2b79422603e836370a97649d258d291
freerdp-debugsource-3.10.3-5.el10_1.6.s390x.rpm SHA-256: dd6f0b6860e37d25adc913d458140b355c020d00b19c111b278b83b01eacfd65
freerdp-libs-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 258c90afb25dc6117ef8a35a06b025d77766d45dc2d2b6681d25983fed6f2bf4
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: e00a4c94ea7c9312b448e8f313d0d1a85ef2dd19b0f9f7ef122a852215a1a420
freerdp-server-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 0870d19515d8b18ab99281626528bfcd30a952b7bb72d2b1f0b16404547c69c1
libwinpr-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 16b337323b613edd47fd5e3371199576687cdf42bf9215d2621399bab21a731d
libwinpr-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 169f3728518e8892c49e305c0d239518c045178e9bc9a998b7ec9a0c8b0a5df8

Red Hat Enterprise Linux for Power, little endian 10

SRPM
freerdp-3.10.3-5.el10_1.6.src.rpm SHA-256: 4ba79a9aeac6491f19cda45880ec51a32556fd56752d8d2f4593eb5fa08f56da
ppc64le
freerdp-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 4b9bb3b788dcc126114fb93013bb41c3c6a4b9c01e470d19d6091bcd5be2d810
freerdp-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: ff94c5259cc6543c86a685aea3620304b5071f9560a2dcafaa78e42e1e1e1cdf
freerdp-debugsource-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 3c03d39eaedca9bf75895b8ec149db69047b3a6ded196dc3533cd60e71519d12
freerdp-libs-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 003f3e0a5fb5ae46dfba23283e364b6de37e45c4bd89ce70764a7ca0f05469ca
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: c7a2455928420c1679891db6e067c033fc6004ea00bbe6c27694347c1cdc48fb
freerdp-server-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 5cea5556b297d1aadcdda3871721432dba3181144418ff367f4f29a7c96e54e9
libwinpr-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 7b9348a7ad350bdc660273ac5c7a51be4c73b59cfaf7b23ba9ff554e0eeee6d6
libwinpr-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 4673668d93a8ad4fa774c5b0e03ab63d6f225953c9557cee917e72f9d4dd6bf5

Red Hat Enterprise Linux for ARM 64 10

SRPM
freerdp-3.10.3-5.el10_1.6.src.rpm SHA-256: 4ba79a9aeac6491f19cda45880ec51a32556fd56752d8d2f4593eb5fa08f56da
aarch64
freerdp-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 5cec95585bcb025b732a04430e285e9199a3e36855070564503a296dcaa5447b
freerdp-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 193226908528223f2df44a8b2ba39530a80be72d419071a9e3c80b1243ba584a
freerdp-debugsource-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 2105a6a52533484fe3ebb84d735f01ef303b330227660b23b2f8cdce4c51e821
freerdp-libs-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 3d2dac6c74cfdd17cf0009c5ec99f58a9c6985a8a41b1498d2b52f03b1022c47
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: b0831e90d0281b0e0ad295137ca260e167a6ca0dbbb99b2159c5de700f40dced
freerdp-server-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 1c9aae1e8cf42ef9f3c6e98a0f890db2925965c60480de2b4fbd58c621d82675
libwinpr-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 4b24eef1f35a4016dc7ac6abf202ae221b4ab2c99af4c8c3d3d826cdfc8f4dc5
libwinpr-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 46e45f0e393d88d76a48cca0866d74a47c2059064fa2e8974353a063ae93b123

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
freerdp-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: c286f58351aafc1e4895257e856266567f4e2726f7a87579d4d848896a500e28
freerdp-debugsource-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: be2c8beeeb3c08bbc18aa4a9a9dd9f7c4c93ced5de9579527c0728f93418d2ba
freerdp-devel-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: a1fa545c1efc03ce62067720cff7190b767d3c0e688ee64c05f79211c975383e
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 7503ddd73fafe99d75de9cfa9badbf2b4d6e85d97c899198d187f8f0b4fdd963
freerdp-server-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: c319dea41e7682f83cd10adf288a378c6c9670e80ac4d31bcd40202af23ca529
freerdp-server-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 84b3446dde300686f51f464eca3178a87c69224ace84d092000131d3dac44830
libwinpr-debuginfo-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 7b977ce057860cab43caa95dd1fd995efa4a6a00f51e30cd6453b46cd22502c8
libwinpr-devel-3.10.3-5.el10_1.6.x86_64.rpm SHA-256: 18ebce4dcc6fc23eef168c76a6ec8cd1c84a68ecaa73c9ad33e6d88a2ae4c283

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
freerdp-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: ff94c5259cc6543c86a685aea3620304b5071f9560a2dcafaa78e42e1e1e1cdf
freerdp-debugsource-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 3c03d39eaedca9bf75895b8ec149db69047b3a6ded196dc3533cd60e71519d12
freerdp-devel-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 558bbd8626d4278cbdef8411b800aec71b84f30d3b3af9ada67797fa902dab26
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: c7a2455928420c1679891db6e067c033fc6004ea00bbe6c27694347c1cdc48fb
freerdp-server-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: b0a3f3b5315624319034b449825c3ee0756140f8a14c41ba26d8380f5b7c0b63
freerdp-server-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 5cea5556b297d1aadcdda3871721432dba3181144418ff367f4f29a7c96e54e9
libwinpr-debuginfo-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 4673668d93a8ad4fa774c5b0e03ab63d6f225953c9557cee917e72f9d4dd6bf5
libwinpr-devel-3.10.3-5.el10_1.6.ppc64le.rpm SHA-256: 74b83a2f7e2b2bb3ef6f13f3e2e24636ebd1be2a61164abc9745335af723b94d

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
freerdp-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 193226908528223f2df44a8b2ba39530a80be72d419071a9e3c80b1243ba584a
freerdp-debugsource-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 2105a6a52533484fe3ebb84d735f01ef303b330227660b23b2f8cdce4c51e821
freerdp-devel-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 3d48e1eb3835db0c233508b6edc0ccba2aed047989255bf158b6a01d997f5c27
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: b0831e90d0281b0e0ad295137ca260e167a6ca0dbbb99b2159c5de700f40dced
freerdp-server-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: aaa3d14c07dd0cf8a4cb31e48d96d7956385ce5092ff5bf3af6e73ffb503e985
freerdp-server-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 1c9aae1e8cf42ef9f3c6e98a0f890db2925965c60480de2b4fbd58c621d82675
libwinpr-debuginfo-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 46e45f0e393d88d76a48cca0866d74a47c2059064fa2e8974353a063ae93b123
libwinpr-devel-3.10.3-5.el10_1.6.aarch64.rpm SHA-256: 6ea3eebc5f745c32f5aef4cbb7b27cce0fde7f677c958a897118fc4607832b5e

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
freerdp-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 6757866adc61186de72eb40f6a4e019dd2b79422603e836370a97649d258d291
freerdp-debugsource-3.10.3-5.el10_1.6.s390x.rpm SHA-256: dd6f0b6860e37d25adc913d458140b355c020d00b19c111b278b83b01eacfd65
freerdp-devel-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 9b390c4d8f4d1e2e017cff328d4814cfabef2f74667efcf683638ffda8f119f3
freerdp-libs-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: e00a4c94ea7c9312b448e8f313d0d1a85ef2dd19b0f9f7ef122a852215a1a420
freerdp-server-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 73a15e8dae420e150301f6927d1d0e5a9cfaa86be185060cf6b7b8c1fe005580
freerdp-server-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 0870d19515d8b18ab99281626528bfcd30a952b7bb72d2b1f0b16404547c69c1
libwinpr-debuginfo-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 169f3728518e8892c49e305c0d239518c045178e9bc9a998b7ec9a0c8b0a5df8
libwinpr-devel-3.10.3-5.el10_1.6.s390x.rpm SHA-256: 0a3d4fdbb1d4e06dca2ca5e31bc1abdc8edf2110d1afadb158b5f80808926e95

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.