UbuntuUpdates.org

Package "freerdp3"

Name: freerdp3

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Free Remote Desktop Protocol library (development files)
  • FreeRDP x11 shadowing server
  • RDP client for Windows Terminal Services (wayland client)
  • RDP client for Windows Terminal Services (X11 client)
Latest version: 3.31.0+dfsg-0ubuntu0.24.04.1
Release: noble (24.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "freerdp3" in Noble

Repository Area Version
base universe 3.5.0+dfsg1-0ubuntu1
base main 3.5.0+dfsg1-0ubuntu1
security main 3.31.0+dfsg-0ubuntu0.24.04.1
security universe 3.31.0+dfsg-0ubuntu0.24.04.1
updates main 3.31.0+dfsg-0ubuntu0.24.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.31.0+dfsg-0ubuntu0.24.04.1 2026-08-31 15:07:54 UTC
No changelog available yet.
Source diff to previous version

Version: 3.30.0+dfsg-0ubuntu0.24.04.2 2026-07-28 22:07:25 UTC
No changelog available yet.
Source diff to previous version

Version: 3.30.0+dfsg-0ubuntu0.24.04.1 2026-07-20 21:08:49 UTC
No changelog available yet.
Source diff to previous version

Version: 3.5.1+dfsg1-0ubuntu1.6 2026-06-16 11:07:37 UTC

  freerdp3 (3.5.1+dfsg1-0ubuntu1.6) noble-security; urgency=medium

  * SECURITY UPDATE: heap-buffer-overflow in planar bitmap decoder
    - debian/patches/CVE-2026-45700.patch: fix bounds checks
    - CVE-2026-45700
  * SECURITY REGRESSION: partial CVE fixes (LP: #2149819)
    - debian/patches/CVE-2026-22858-fix.patch: fix incorrect
      bounds check in base64_decode_char
    - debian/patches/CVE-2026-23732-fix.patch: fix overflow on
      32-bit systems
    - debian/patches/CVE-2026-25952-fix.patch: refactor to use
      xf_rail_get_window

 -- Nishit Majithia <email address hidden> Fri, 12 Jun 2026 17:00:49 +0530
Source diff to previous version
CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write whe
CVE-2026-22858 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding pa
CVE-2026-23732 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbData`/remaining length and neve
CVE-2026-25952 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow`

Version: 3.5.1+dfsg1-0ubuntu1.5 2026-03-20 08:08:16 UTC

  freerdp3 (3.5.1+dfsg1-0ubuntu1.5) noble-security; urgency=medium

  * SECURITY REGRESSION: crash with realloc(): invalid next size
    (LP: #2144889)
    - debian/patches/CVE-2026-27951.patch: disabled, pending further
      investigation.

 -- Marc Deslauriers <email address hidden> Thu, 19 Mar 2026 10:23:07 -0400
2144889 Regression in 3.5.1+dfsg1-0ubuntu1.4: Remmina crashes with \
CVE-2026-27951 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless


About   -   Send Feedback to @ubuntu_updates