Home / mailings

PDF

[USN-9007-1] FreeRDP vulnerabilities

Posted on 09 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9007-1
November 09, 2026

freerdp3 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in FreeRDP.

Software Description:
- freerdp3: RDP client for Windows Terminal Services

Details:

It was discovered that FreeRDP contained multiple security issues. An
attacker could possibly use these issues to obtain sensitive information,
cause FreeRDP to crash, resulting in a denial of service, or execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
freerdp-wayland 3.32.2+dfsg-0ubuntu0.26.10.1
freerdp-x11 3.32.2+dfsg-0ubuntu0.26.10.1
freerdp3-wayland 3.32.2+dfsg-0ubuntu0.26.10.1
freerdp3-x11 3.32.2+dfsg-0ubuntu0.26.10.1
libfreerdp3-3 3.32.2+dfsg-0ubuntu0.26.10.1

Ubuntu 26.04 LTS
freerdp-wayland 3.32.2+dfsg-0ubuntu0.26.04.1
freerdp-x11 3.32.2+dfsg-0ubuntu0.26.04.1
freerdp3-wayland 3.32.2+dfsg-0ubuntu0.26.04.1
freerdp3-x11 3.32.2+dfsg-0ubuntu0.26.04.1
libfreerdp3-3 3.32.2+dfsg-0ubuntu0.26.04.1

Ubuntu 24.04 LTS
freerdp3-wayland 3.32.2+dfsg-0ubuntu0.24.04.1
freerdp3-x11 3.32.2+dfsg-0ubuntu0.24.04.1
libfreerdp3-3 3.32.2+dfsg-0ubuntu0.24.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
https://ubuntu.com/security/notices/USN-9007-1
CVE-2026-121386, CVE-2026-121387, CVE-2026-121388, CVE-2026-121389,
CVE-2026-121390, CVE-2026-121391, CVE-2026-121392, CVE-2026-121393,
CVE-2026-121394, CVE-2026-121395, CVE-2026-121396, CVE-2026-121397,
CVE-2026-121398, CVE-2026-121399, CVE-2026-121400, CVE-2026-121401,
CVE-2026-121402, CVE-2026-121403, CVE-2026-121404, CVE-2026-121405,
CVE-2026-121406, CVE-2026-121407, CVE-2026-121408, CVE-2026-121409,
CVE-2026-121410, CVE-2026-121411, CVE-2026-121412

Package Information:
https://launchpad.net/ubuntu/+source/freerdp3/3.32.2+dfsg-0ubuntu0.26.10.1
https://launchpad.net/ubuntu/+source/freerdp3/3.32.2+dfsg-0ubuntu0.26.04.1
https://launchpad.net/ubuntu/+source/freerdp3/3.32.2+dfsg-0ubuntu0.24.04.1

--===============1728580929037513120==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP