- What: A regression was introduced in FreeRDP due to a previous security update.
- Impact: This regression could lead to a buffer overflow, potentially causing a denial of service or arbitrary code execution.
- Affected: FreeRDP versions in Ubuntu 24.04 LTS, 22.04 LTS, 20.04 LTS, and 18.04 LTS.
- Patch: This update fixes the regression introduced by USN-8004-1.
- CVE: CVE-2026-23533
Ubuntu Security Notices USN-8004-2 USN-8004-2: FreeRDP regression Publication date 8 February 2026 Overview USN-8004-1 introduced a regression in FreeRDP Releases 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS Packages freerdp2 - RDP client for Windows Terminal Services Details USN-8004-1 fixed vulnerabilities in FreeRDP. The update for CVE-2026-23533 introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kim Dong Han discovered that FreeRDP did not correctly validate the size of certain variables, which could cause a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. USN-8004-1 fixed vulnerabilities in FreeRDP. The update for CVE-2026-23533 introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kim Dong Han discovered that FreeRDP did not correctly validate the size of certain variables, which could cause a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. Update instructions After a standard system update you need to restart your session to make all the necessary changes. Learn more about how to get the fixes. The problem can be corrected by updating your system to the following package versions: Ubuntu Release Package Version 24.04 LTS noble libfreerdp2-2t64 – 2.11.5+dfsg1-1ubuntu0.1~esm4 22.04 LTS jammy libfreerdp2-2 – 2.6.1+dfsg1-3ubuntu2.9 20.04 LTS focal libfreerdp2-2 – 2.6.1+dfsg1-0ubuntu0.20.04.2+esm2 18.04 LTS bionic libfreerdp2-2 – 2.2.0+dfsg1-0ubuntu0.18.04.4+esm4 Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. Get Ubuntu Pro References https://bugs.launchpad.net/bugs/2139694 CVE-2026-23533 CVE-2026-23533 USN-8004-1 USN-8004-1