UnratedFix available
UBUNTU-CVE-2026-91949
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.
Announced Source revision 1
Original source ↗UBUNTU-CVE-2026-91949
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-91949
freerdp
Source reference: /affected/0/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/1/package/name
- Affected versions
- 2.0.0~git20170725.1.1648deb+dfsg1-1
Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6build1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1Source reference:
/affected/1/versions2.1.1+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm5Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm6Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp
Source reference: /affected/2/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1
Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/3/package/name
- Affected versions
- 2.0.0~git20190204.1.2693389a+dfsg1-1
Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build1Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build2Source reference:
/affected/3/versions2.1.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.3Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.4Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.5Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.6Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm3Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm4Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/4/package/name
- Affected versions
- 2.3.0+dfsg1-2build1
Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu1Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu2Source reference:
/affected/4/versions2.4.1+dfsg1-1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu2Source reference:
/affected/4/versions2.5.0+dfsg1-1Source reference:
/affected/4/versions2.6.0+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.4Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.5Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.6Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.7Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.8Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.9Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.10Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.11Source reference:
/affected/4/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/5/package/name
- Affected versions
- 3.4.0+dfsg1-0ubuntu2
Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu3Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu4Source reference:
/affected/5/versions3.5.0+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.2Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.4Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.5Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.6Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.1Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.2Source reference:
/affected/5/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.24.04.1
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/6/package/name
- Affected versions
- 2.10.0+dfsg1-1.1ubuntu1
Source reference:
/affected/6/versions2.11.2+dfsg1-1Source reference:
/affected/6/versions2.11.2+dfsg1-1build1Source reference:
/affected/6/versions2.11.2+dfsg1-1build3Source reference:
/affected/6/versions2.11.5+dfsg1-1build1Source reference:
/affected/6/versions2.11.5+dfsg1-1build2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm1Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm3Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm4Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm5Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm6Source reference:
/affected/6/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/7/package/name
- Affected versions
- 3.16.0+dfsg-2
Source reference:
/affected/7/versions3.18.0+dfsg-1ubuntu1Source reference:
/affected/7/versions3.19.0+dfsg-1Source reference:
/affected/7/versions3.19.1+dfsg-1Source reference:
/affected/7/versions3.20.0+dfsg-1Source reference:
/affected/7/versions3.20.2+dfsg-1Source reference:
/affected/7/versions3.21.0+dfsg-1Source reference:
/affected/7/versions3.22.0+dfsg-1Source reference:
/affected/7/versions3.24.1+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.2Source reference:
/affected/7/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.26.04.1
Source reference:
/affected/7/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.0.0~git20170725.1.1648deb+dfsg1-1",
"2.0.0~git20170725.1.1648deb+dfsg1-5",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2",
"2.0.0~git20170725.1.1648deb+dfsg1-6",
"2.0.0~git20170725.1.1648deb+dfsg1-6build1",
"2.0.0~git20170725.1.1648deb+dfsg1-7",
"2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1",
"2.1.1+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.2",
"2.2.0+dfsg1-0ubuntu0.18.04.3",
"2.2.0+dfsg1-0ubuntu0.18.04.4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm1",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm2",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm3",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm5",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.0.0~git20190204.1.2693389a+dfsg1-1",
"2.0.0~git20190204.1.2693389a+dfsg1-2",
"2.0.0~git20190204.1.2693389a+dfsg1-2build1",
"2.0.0~git20190204.1.2693389a+dfsg1-2build2",
"2.1.1+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.2",
"2.2.0+dfsg1-0ubuntu0.20.04.3",
"2.2.0+dfsg1-0ubuntu0.20.04.4",
"2.2.0+dfsg1-0ubuntu0.20.04.5",
"2.2.0+dfsg1-0ubuntu0.20.04.6",
"2.6.1+dfsg1-0ubuntu0.20.04.1",
"2.6.1+dfsg1-0ubuntu0.20.04.2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm1",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm3",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.3.0+dfsg1-2build1",
"2.3.0+dfsg1-2ubuntu1",
"2.3.0+dfsg1-2ubuntu2",
"2.4.1+dfsg1-1",
"2.4.1+dfsg1-1ubuntu1",
"2.4.1+dfsg1-1ubuntu2",
"2.5.0+dfsg1-1",
"2.6.0+dfsg1-1",
"2.6.1+dfsg1-1",
"2.6.1+dfsg1-3",
"2.6.1+dfsg1-3ubuntu1",
"2.6.1+dfsg1-3ubuntu2",
"2.6.1+dfsg1-3ubuntu2.1",
"2.6.1+dfsg1-3ubuntu2.2",
"2.6.1+dfsg1-3ubuntu2.3",
"2.6.1+dfsg1-3ubuntu2.4",
"2.6.1+dfsg1-3ubuntu2.5",
"2.6.1+dfsg1-3ubuntu2.6",
"2.6.1+dfsg1-3ubuntu2.7",
"2.6.1+dfsg1-3ubuntu2.8",
"2.6.1+dfsg1-3ubuntu2.9",
"2.6.1+dfsg1-3ubuntu2.10",
"2.6.1+dfsg1-3ubuntu2.11"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.4.0+dfsg1-0ubuntu2",
"3.4.0+dfsg1-0ubuntu3",
"3.4.0+dfsg1-0ubuntu4",
"3.5.0+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1.1",
"3.5.1+dfsg1-0ubuntu1.2",
"3.5.1+dfsg1-0ubuntu1.4",
"3.5.1+dfsg1-0ubuntu1.5",
"3.5.1+dfsg1-0ubuntu1.6",
"3.30.0+dfsg-0ubuntu0.24.04.1",
"3.30.0+dfsg-0ubuntu0.24.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-apps%2Fnoble",
"ecosystem": "Ubuntu:Pro:24.04:LTS"
},
"versions": [
"2.10.0+dfsg1-1.1ubuntu1",
"2.11.2+dfsg1-1",
"2.11.2+dfsg1-1build1",
"2.11.2+dfsg1-1build3",
"2.11.5+dfsg1-1build1",
"2.11.5+dfsg1-1build2",
"2.11.5+dfsg1-1ubuntu0.1~esm1",
"2.11.5+dfsg1-1ubuntu0.1~esm2",
"2.11.5+dfsg1-1ubuntu0.1~esm3",
"2.11.5+dfsg1-1ubuntu0.1~esm4",
"2.11.5+dfsg1-1ubuntu0.1~esm5",
"2.11.5+dfsg1-1ubuntu0.1~esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-client2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-server2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libuwac0-0t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr-tools2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.16.0+dfsg-2",
"3.18.0+dfsg-1ubuntu1",
"3.19.0+dfsg-1",
"3.19.1+dfsg-1",
"3.20.0+dfsg-1",
"3.20.2+dfsg-1",
"3.21.0+dfsg-1",
"3.22.0+dfsg-1",
"3.24.1+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1.1",
"3.30.0+dfsg-0ubuntu0.26.04.1",
"3.30.0+dfsg-0ubuntu0.26.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91949.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server-proxy3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #5833 · Revision 1
- Added to Heist Feed
- Publisher date