UbuntuUpdates.org

Package "freerdp-x11"

Name: freerdp-x11

Description:

RDP client for Windows Terminal Services (X11 client)
Latest version: 3.32.2+dfsg-0ubuntu0.26.10.1
Release: stonking (26.10)
Level: updates
Repository: universe
Head package: freerdp3
Homepage: https://www.freerdp.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "freerdp-x11"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "freerdp-x11" in Stonking

Repository Area Version
base universe 3.32.1+dfsg-1
security universe 3.32.2+dfsg-0ubuntu0.26.10.1

Changelog

Version: 3.32.2+dfsg-0ubuntu0.26.10.1 2026-11-09 18:08:42 UTC

freerdp3 (3.32.2+dfsg-0ubuntu0.26.10.1) stonking-security; urgency=medium

  * Updated to 3.32.2 to fix multiple security issues
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g67-jhpc-q5xp
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-799q-hjgw-g55g
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cg4f-57hc-v7w7
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrp5-666j-g6gp
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wg7g-gx9g-r96c
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f53w-3364-jr35
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-66mr-7wc7-23vc
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hqf8-95c7-6r92
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8g9g-hqqp-fw69
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jq25-3374-4262
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qw2-8h66-pvpw
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5j39-x36c-x9pm
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6p3w-fv52-cf24
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4qq4-qwxq-49m8
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7w3-32ch-x2jq
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v3q2-qjvf-7rqw
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4vh4-3pc3-32p7
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x4x6-2hrm-hvq9
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xc85-4mqc-xgcx
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v85m-wg84-5ffh
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6wqx-rv3q-vcxp
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fg78-v8j5-8697
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-983v-jp34-f3fm
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2557-79qc-6gfr
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xjhw-2r55-m95g
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m59q-wm7v-mp57
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x26g-fp9v-c2pg
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c426-ppvf-jpfg
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5qqp-5ffm-m3p9
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fqcj-rwww-2498
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r387-jjq3-87hv
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c9x-4gr7-hrwx
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x8vp-ff7m-294g
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3pg4-5r42-wxvj
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qw7w-hhxq-763c
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w897-ffhv-5j7g
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3hf9-w6hr-hf9j
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j536-qc58-pmf8
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fqw6-jf2h-6fj6
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cx9c-q4jc-wm6c
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wffv-rjv2-h2x2
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jqf4-4p68-4p43
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q82v-5wjg-6h57
   - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m7xq-5f7v-hjvw
   - CVE-2026-121386, CVE-2026-121387, CVE-2026-121388, CVE-2026-121389,
     CVE-2026-121390, CVE-2026-121391, CVE-2026-121392, CVE-2026-121393,
     CVE-2026-121394, CVE-2026-121395, CVE-2026-121396, CVE-2026-121397,
     CVE-2026-121398, CVE-2026-121399, CVE-2026-121400, CVE-2026-121401,
     CVE-2026-121402, CVE-2026-121403, CVE-2026-121404, CVE-2026-121405,
     CVE-2026-121406, CVE-2026-121407, CVE-2026-121408, CVE-2026-121409,
     CVE-2026-121410, CVE-2026-121411, CVE-2026-121412

 -- Marc Deslauriers Fri, 06 Nov 2026 08:59:24 -0500
CVE-2026-121386 FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and winpr_convert_from_jpeg(), which lack li
CVE-2026-121387 FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malicious RDP servers to read past
CVE-2026-121388 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client a
CVE-2026-121389 FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious RDP servers to abort clients
CVE-2026-121390 FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing or non-st
CVE-2026-121391 FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close previous descriptors on repeated
CVE-2026-121392 FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts Common Name fallback despite
CVE-2026-121393 FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with verbose Win
CVE-2026-121394 FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Atta
CVE-2026-121395 FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A mal
CVE-2026-121396 FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_auth_verifier triggered by mal
CVE-2026-121397 FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer() that allows malicious RDP servers to leak client memory
CVE-2026-121398 FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module during session teardown. A ma
CVE-2026-121399 FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD Gateway to force a 2 GiB client all
CVE-2026-121400 FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious RD Gateway to exhaust client C
CVE-2026-121401 FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a PKT_TYPE_EXTENDED_AUTH_MSG without verifying n
CVE-2026-121402 FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero
CVE-2026-121403 FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body silentl
CVE-2026-121404 FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by
CVE-2026-121405 FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memo
CVE-2026-121406 FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zgfx_decompress status and passes the res
CVE-2026-121407 FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows authenticated clients to cr
CVE-2026-121408 FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redirection channel because FindChannelById returns a channel pointer without a ref
CVE-2026-121409 FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers to abort clients or proxies v
CVE-2026-121410 FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero surface dime
CVE-2026-121411 FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious
CVE-2026-121412 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected clients retain heap mem


About   -   Send Feedback to @ubuntu_updates