> USN-8004-2: FreeRDP regression
[DATE: 08/02/2026 22:38]
[LANGUAGE: EN]
USN-8004-1 fixed vulnerabilities in FreeRDP. The update for
CVE-2026-23533 introduced a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Kim Dong Han discovered that FreeRDP did not correctly validate the size of
certain variables, which could cause a buffer overflow. An attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code.