Ubuntu Updates FreeRDP for 27 Security Vulnerabilities
Tech GuruQuick Answer
Update the Ubuntu FreeRDP 3 client and libraries for the correct release, restart sessions and test authentication, display and required redirection functions before broad rollout.
Confirm Scope And Apply The Supported Remediation
What to do now: Record Ubuntu release, X11 or Wayland clients, linked FreeRDP libraries, remote-access dependencies and connection profiles. Ubuntu 24.04 LTS, 26.04 LTS and 26.10 using the listed FreeRDP 3 client and library packages. Apply the release-specific FreeRDP packages from the Ubuntu security repositories, including installed client and library components named by USN-9007-1. Verify complete package versions and test representative RDP connections, authentication, display handling and approved clipboard/device redirection; retain results.
Last verified: 2026-11-09 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | FreeRDP on supported Ubuntu releases |
|---|---|
| Advisory | USN-9007-1 |
| CVEs | CVE-2026-121386, CVE-2026-121387, CVE-2026-121388, CVE-2026-121389, CVE-2026-121390, CVE-2026-121391, CVE-2026-121392, CVE-2026-121393, CVE-2026-121394, CVE-2026-121395, CVE-2026-121396, CVE-2026-121397, CVE-2026-121398, CVE-2026-121399, CVE-2026-121400, CVE-2026-121401, CVE-2026-121402, CVE-2026-121403, CVE-2026-121404, CVE-2026-121405, CVE-2026-121406, CVE-2026-121407, CVE-2026-121408, CVE-2026-121409, CVE-2026-121410, CVE-2026-121411, CVE-2026-121412 |
| Authoritative release date | November 9, 2026; official Ubuntu RSS publication timestamp 2026-11-09T13:21:41+00:00. |
| Authority revision date | No later revision is stated. |
| Affected versions | Ubuntu 24.04 LTS, 26.04 LTS and 26.10 using the listed FreeRDP 3 client and library packages. |
| Fixed version | 24.04: 3.32.2+dfsg-0ubuntu0.24.04.1; 26.04: 3.32.2+dfsg-0ubuntu0.26.04.1; 26.10: 3.32.2+dfsg-0ubuntu0.26.10.1 |
| CVSS base score | Not provided by the authority |
| CVSS severity | Not provided by the authority |
| Exploitation status | Ubuntu does not state exploitation in this notice.; no exploitation claim is inferred. |
What Changed
Ubuntu released FreeRDP 3 packages addressing 27 vulnerabilities that may cause disclosure, denial of service or code execution. The update also introduces additional upstream bug fixes.
What To Validate Now
- Inventory. Record Ubuntu release, X11 or Wayland clients, linked FreeRDP libraries, remote-access dependencies and connection profiles.
- Establish applicability. Ubuntu 24.04 LTS, 26.04 LTS and 26.10 using the listed FreeRDP 3 client and library packages.
- Remediate. Apply the release-specific FreeRDP packages from the Ubuntu security repositories, including installed client and library components named by USN-9007-1.
- Validate. Verify complete package versions and test representative RDP connections, authentication, display handling and approved clipboard/device redirection; retain results.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
This is a new upstream release with additional behavior changes. Test managed remote-access workflows and plugins; reconnecting sessions alone does not prove every library consumer was restarted.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
