Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 603
Alerts This Week
Warning Icon 1 603

Ubuntu 24.04 LTS FreeRDP Denial of Service Regression USN-8004-2

ubuntu
Calendar Grey February 9, 2026
Dist Ubuntu Esm H88
Update to Ubuntu 24.04 to fix regression issue in FreeRDP. Restore proper functionality post-update and prevent service disruptions.
USN-8004-1 introduced a regression in FreeRDP

Summary

USN-8004-1 introduced a regression in FreeRDP

Software Description:

- freerdp2: RDP client for Windows Terminal Services

Details:

USN-8004-1 fixed vulnerabilities in FreeRDP. The update for

CVE-2026-23533 introduced a regression. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Kim Dong Han discovered that FreeRDP did not correctly validate the size of

certain variables, which could cause a buffer overflow. An attacker could

possibly use this issue to cause a denial of service or execute arbitrary

code.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libfreerdp2-2t64                2.11.5+dfsg1-1ubuntu0.1~esm4
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  libfreerdp2-2                   2.6.1+dfsg1-3ubuntu2.9

Ubuntu 20.04 LTS
  libfreerdp2-2                   2.6.1+dfsg1-0ubuntu0.20.04.2+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libfreerdp2-2                   2.2.0+dfsg1-0ubuntu0.18.04.4+esm4
                                  Available with Ubuntu Pro

After a standard system update you need to restart your session to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-8004-2

https://ubuntu.com/security/notices/USN-8004-1

CVE-2026-23533,

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8004-2

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.