USN-8880-1: FreeRDP flaws, update on Ubuntu 24.04 and 26.04 LTS

Ubuntu Security Notices published advisory USN-8880-1 on 6 October 2026, concerning multiple security issues in FreeRDP, the RDP client used on Linux to connect to Windows Terminal Services. This news concerns anyone running Ubuntu servers with RDP access to Windows machines, typically in hybrid environments or for remote administration.

What the advisory says

According to the official text, FreeRDP was found to contain multiple security issues. An attacker could exploit them to obtain sensitive information, cause FreeRDP to crash resulting in denial of service, or execute arbitrary code. The advisory does not list the individual CVEs in the published text, but refers to the Launchpad bug tracker for technical details.

Affected package

The package involved is freerdp3 - RDP client for Windows Terminal Services.

Fixed versions

Ubuntu release	Package	Fixed version
26.04 LTS (resolute)	freerdp-wayland	3.32.1+dfsg-0ubuntu0.26.04.1
26.04 LTS (resolute)	freerdp-x11	3.32.1+dfsg-0ubuntu0.26.04.1
26.04 LTS (resolute)	freerdp3-wayland	3.32.1+dfsg-0ubuntu0.26.04.1
26.04 LTS (resolute)	freerdp3-x11	3.32.1+dfsg-0ubuntu0.26.04.1
26.04 LTS (resolute)	libfreerdp3-3	3.32.1+dfsg-0ubuntu0.26.04.1
24.04 LTS (noble)	freerdp3-wayland	3.32.1+dfsg-0ubuntu0.24.04.1
24.04 LTS (noble)	freerdp3-x11	3.32.1+dfsg-0ubuntu0.24.04.1
24.04 LTS (noble)	libfreerdp3-3	3.32.1+dfsg-0ubuntu0.24.04.1

How to update

According to Ubuntu, the update uses a new upstream release that also includes non-security bug fixes. In general, a normal system update applies all the necessary changes, for example with:

sudo apt update && sudo apt upgrade

For technical reference, the advisory points to Launchpad bug #2169586 (bugs.launchpad.net/bugs/2169586). Ubuntu also reminds users that Ubuntu Pro offers ten years of security coverage for over 25,000 packages in the Main and Universe repositories, free of charge for up to five machines.