Security News

Cybersecurity news aggregator

🔄
HIGH Updates Red Hat Errata

RHSA-2026:9656: Important: freerdp security update

A heap buffer overflow (CVE-2026-33984, CVSS 7.5 HIGH) in FreeRDP allows arbitrary code execution via crafted pixel data, while a separate flaw (CVE-2026-33983, CVSS 6.5 MEDIUM) enables denial of service via specially crafted RDP messages. These vulnerabilities affect all FreeRDP versions prior to 3.24.2. The fix requires upgrading FreeRDP to version 3.24.2.
Read Full Article →

Red Hat Product Errata RHSA-2026:9656 - Security Advisory Issued: 2026-04-22 Updated: 2026-04-22 RHSA-2026:9656 - Security Advisory Overview Updated Packages Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for freerdp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984) FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2453219 - CVE-2026-33984 FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data BZ - 2453220 - CVE-2026-33983 FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages CVEs CVE-2026-33983 CVE-2026-33984 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.8.src.rpm SHA-256: dae277dcd270d693f8e94925327098a9b11ae71b228f3331ceb94ef5ccc0ad50 x86_64 freerdp-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 27f779b8836be62262fdfd72163b3363023de319f6e451f4801f06db5f8d75a0 freerdp-debuginfo-2.11.7-1.el9_6.8.i686.rpm SHA-256: 72e405ab9f1c3bc9f7dba58c80f334767203828d262100319ff6ed89f79118f6 freerdp-debuginfo-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 6fbe58d5ae61ba773ccb30e5689752be1a898ff2072cb41df7bb9821afddd553 freerdp-debugsource-2.11.7-1.el9_6.8.i686.rpm SHA-256: e81d890c397d9e1d7f18d4ddf5b373cb81ac85980d99d920792c707c1cfc41c2 freerdp-debugsource-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 778fb7c91363a794f394e3085c8ef684a88dcf08cd39848bbb687d77218912d3 freerdp-libs-2.11.7-1.el9_6.8.i686.rpm SHA-256: 16308340d2b75d9bc3cedd1437707412d50c89198a7ed4e448a72021190034a5 freerdp-libs-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: b5f8b2c62e999d8c8427138f78c8db42e0b3c96d252e5f08deed49d25715f742 freerdp-libs-debuginfo-2.11.7-1.el9_6.8.i686.rpm SHA-256: a4eadf3836cc3fe13de5ed9936d1b8cdd6d26f44f2a6b0e0e917b08ab49f7b01 freerdp-libs-debuginfo-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 07337cf31c7f5d7199fbc05e8bdef12501511e50126c1fe924b609017802159b libwinpr-2.11.7-1.el9_6.8.i686.rpm SHA-256: ee4f8dbff40386869f2b0bbd7446fe190b0dfbe620cc684f83b17083a35c8ca6 libwinpr-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 2f2fb461f26fe7e6eaca841dea8cb16597fa5de12a912903d7ca1be6f7a3bda8 libwinpr-debuginfo-2.11.7-1.el9_6.8.i686.rpm SHA-256: 080aced49d358c8922e2b19319a7ddb90b345b27f0581bac70f2cbb5fa19f318 libwinpr-debuginfo-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 28d3312d7b212c4bacf885fa889a79e53b1a5a654d666e85611188a11aede3ea Red Hat Enterprise Linux Server - AUS 9.6 SRPM freerdp-2.11.7-1.el9_6.8.src.rpm SHA-256: dae277dcd270d693f8e94925327098a9b11ae71b228f3331ceb94ef5ccc0ad50 x86_64 freerdp-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 27f779b8836be62262fdfd72163b3363023de319f6e451f4801f06db5f8d75a0 freerdp-debuginfo-2.11.7-1.el9_6.8.i686.rpm SHA-256: 72e405ab9f1c3bc9f7dba58c80f334767203828d262100319ff6ed89f79118f6 freerdp-debuginfo-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 6fbe58d5ae61ba773ccb30e5689752be1a898ff2072cb41df7bb9821afddd553 freerdp-debugsource-2.11.7-1.el9_6.8.i686.rpm SHA-256: e81d890c397d9e1d7f18d4ddf5b373cb81ac85980d99d920792c707c1cfc41c2 freerdp-debugsource-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 778fb7c91363a794f394e3085c8ef684a88dcf08cd39848bbb687d77218912d3 freerdp-libs-2.11.7-1.el9_6.8.i686.rpm SHA-256: 16308340d2b75d9bc3cedd1437707412d50c89198a7ed4e448a72021190034a5 freerdp-libs-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: b5f8b2c62e999d8c8427138f78c8db42e0b3c96d252e5f08deed49d25715f742 freerdp-libs-debuginfo-2.11.7-1.el9_6.8.i686.rpm SHA-256: a4eadf3836cc3fe13de5ed9936d1b8cdd6d26f44f2a6b0e0e917b08ab49f7b01 freerdp-libs-debuginfo-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 07337cf31c7f5d7199fbc05e8bdef12501511e50126c1fe924b609017802159b libwinpr-2.11.7-1.el9_6.8.i686.rpm SHA-256: ee4f8dbff40386869f2b0bbd7446fe190b0dfbe620cc684f83b17083a35c8ca6 libwinpr-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 2f2fb461f26fe7e6eaca841dea8cb16597fa5de12a912903d7ca1be6f7a3bda8 libwinpr-debuginfo-2.11.7-1.el9_6.8.i686.rpm SHA-256: 080aced49d358c8922e2b19319a7ddb90b345b27f0581bac70f2cbb5fa19f318 libwinpr-debuginfo-2.11.7-1.el9_6.8.x86_64.rpm SHA-256: 28d3312d7b212c4bacf885fa889a79e53b1a5a654d666e85611188a11aede3ea Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.8.src.rpm SHA-256: dae277dcd270d693f8e94925327098a9b11ae71b228f3331ceb94ef5ccc0ad50 s390x freerdp-2.11.7-1.el9_6.8.s390x.rpm SHA-256: 7422e8dd0021f6b25b8a680e3135467088bb73f7ff2c93c6ca736e569d1df146 freerdp-debuginfo-2.11.7-1.el9_6.8.s390x.rpm SHA-256: 054a9766db9df5566d82d24fe93f294c9bfb177c5e1fa4d95a4954a61296ac84 freerdp-debugsource-2.11.7-1.el9_6.8.s390x.rpm SHA-256: 0faa804da938cb72209e83352e58c4255e39e08c877deeb512a2d6a8f328818d freerdp-libs-2.11.7-1.el9_6.8.s390x.rpm SHA-256: ed255c51d1539b15e8870945ce89a6f7d32cb853ef42f2b6bc7609fc7af29097 freerdp-libs-debuginfo-2.11.7-1.el9_6.8.s390x.rpm SHA-256: cebdee6dae18eea5592070ab5af7bef2ae8dc3d60d6c05ebdb947610b990fdc7 libwinpr-2.11.7-1.el9_6.8.s390x.rpm SHA-256: 96be541217be450ee76b7fd1dc5e163c51084644cab2ac094d573c6c11dba9f2 libwinpr-debuginfo-2.11.7-1.el9_6.8.s390x.rpm SHA-256: b16a22f130507ef4d0fb3d3f6ee00a8c4e1bec67321af60cecc468b41d8fb1cc Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.8.src.rpm SHA-256: dae277dcd270d693f8e94925327098a9b11ae71b228f3331ceb94ef5ccc0ad50 ppc64le freerdp-2.11.7-1.el9_6.8.ppc64le.rpm SHA-256: d560be0b698ab5c3eb8f748ff80d464a2a6c11fefb3c79d5d27270e32eba2fcc freerdp-debuginfo-2.11.7-1.el9_6.8.ppc64le.rpm SHA-256: 5f43e2fac4704c6cf7e2bb675a701da9ceb452f8462bce79f95db777ddf80478 freerdp-debugsource-2.11.7-1.el9_6.8.ppc64le.rpm SHA-256: 210bd9e857f45a0c14eed3fd591b6144246be6fea15b51272bedc59b3c67ca89 freerdp-libs-2.11.7-1.el9_6.8.ppc64le.rpm SHA-256: a8191e6eecfdaae10ff30a1d6c51dc18f315e0ae1a569579fecc797297f7ca30 freerdp-libs-debuginfo-2.11.7-1.el9_6.8.ppc64le.rpm SHA-256: e4ca790c986b5506f8d77389565870a89c245135d026800903fb00cd4cdec582 libwinpr-2.11.7-1.el9_6.8.ppc64le.rpm SHA-256: 6a0d2befd27b38d00f5ca6dc7d972bca771311c831c554d533cfa6924844e9cc libwinpr-debuginfo-2.11.7-1.el9_6.8.ppc64le.rpm SHA-256: dd5da5ad2fd0b7e079bdd543d5a4af2ef250f872fea188eb85931c6139a56c70 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM freerdp-2.11.7-1.el9_6.8.src.rpm SHA-256: dae277dcd270d693f8e94925327098a9b11ae71b228f3331ceb94ef5ccc0ad50 aarch64 freerdp-2.11.7-1.el9_6.8.aarch64.rpm SHA-256: 11cbbca326be641998a518384b31e2865ee24aaf3e8fb665e698291212cddaea freerdp-debuginfo-2.11.7-1.el9_6.8.aarch64.rpm SHA-256: c67d87b61a16e08ebc1e4e1713df5740ad3f8d8422865d8ea4a232ecac36b85b freerdp-debugsource-2.11.7-1.el9_6.8.aarch64.rpm SHA-256: f50f265641773e450898bdbf73f20527e7a5ca281bd1830046c002fd51ab3253 freerdp-libs-2.11.7-1.el9_6.8.aarch64.rpm SHA-256: 4c3a1cd9952da085a0c7aa0dbcff4a58edd97eda9837e298435533e0d44fde2f freerdp-libs-debuginfo-2.11.7-1.el9_6.8.aarch64.rpm SHA-256: 6cef5a6c0e038b572cc00bbe86f9ad9707f414cfa82148bdc800aaf5f050bb7b libwinpr-2.11.7-1.el9_6.8.aarch64.rpm SHA-256: 2d49772a814fb4cee29646a6486efa1e0d6c8e527edaef1e18c8068487f2d11f libwinpr-debuginfo-2.11.7-1.el9_6.8.aarch64.rpm SHA-256: 04d34693d8511c7e027bb2b790434614da560134cf7b3d2ef9064cc2046ccbe2 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM freerdp-2.11.7-1.el9_6.8.src.rpm SHA-256: dae277dcd270d693f8e94925327098a9b11ae71b228f3331ceb94ef5ccc0ad50 ppc6

Share this article