Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Ubuntu 24.04 FreeRDP Important Buffer Overflow USN-8004-1

ubuntu
Calendar Grey February 3, 2026
Dist Ubuntu Esm H88
Several security issues in FreeRDP fixed for Ubuntu users across multiple versions. Immediate updates recommended.
Several security issues were fixed in FreeRDP.

Summary

Several security issues were fixed in FreeRDP.

Software Description:

- freerdp2: RDP client for Windows Terminal Services

Details:

Kim Dong Han discovered that FreeRDP did not correctly validate the size of

certain variables, which could cause a buffer overflow. An attacker could

possibly use this issue to cause a denial of service or execute arbitrary

code.

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow Ubuntu important freerdp2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libfreerdp2-2t64                2.11.5+dfsg1-1ubuntu0.1~esm3
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  libfreerdp2-2                   2.6.1+dfsg1-3ubuntu2.8

Ubuntu 20.04 LTS
  libfreerdp2-2                   2.6.1+dfsg1-0ubuntu0.20.04.2+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libfreerdp2-2                   2.2.0+dfsg1-0ubuntu0.18.04.4+esm3
                                  Available with Ubuntu Pro

After a standard system update you need to restart your session to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-8004-1

CVE-2026-23530, CVE-2026-23531, CVE-2026-23532, CVE-2026-23533,

CVE-2026-23534

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8004-1

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow Ubuntu important freerdp2

Package Information

https://launchpad.net/ubuntu/+source/freerdp2/2.6.1+dfsg1-3ubuntu2.8

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here