UnratedFix available
UBUNTU-CVE-2026-91946
FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function addresses transmitted in the PDU, defeating heap ASLR and disclosing the GLib module base address.
Announced Source revision 1
Original source ↗UBUNTU-CVE-2026-91946
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-91946
freerdp
Source reference: /affected/0/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/1/package/name
- Affected versions
- 2.0.0~git20170725.1.1648deb+dfsg1-1
Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6build1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1Source reference:
/affected/1/versions2.1.1+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm5Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm6Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp
Source reference: /affected/2/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1
Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/3/package/name
- Affected versions
- 2.0.0~git20190204.1.2693389a+dfsg1-1
Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build1Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build2Source reference:
/affected/3/versions2.1.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.3Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.4Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.5Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.6Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm3Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm4Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/4/package/name
- Affected versions
- 2.3.0+dfsg1-2build1
Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu1Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu2Source reference:
/affected/4/versions2.4.1+dfsg1-1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu2Source reference:
/affected/4/versions2.5.0+dfsg1-1Source reference:
/affected/4/versions2.6.0+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.4Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.5Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.6Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.7Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.8Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.9Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.10Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.11Source reference:
/affected/4/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/5/package/name
- Affected versions
- 3.4.0+dfsg1-0ubuntu2
Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu3Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu4Source reference:
/affected/5/versions3.5.0+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.2Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.4Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.5Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.6Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.1Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.2Source reference:
/affected/5/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.24.04.1
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/6/package/name
- Affected versions
- 2.10.0+dfsg1-1.1ubuntu1
Source reference:
/affected/6/versions2.11.2+dfsg1-1Source reference:
/affected/6/versions2.11.2+dfsg1-1build1Source reference:
/affected/6/versions2.11.2+dfsg1-1build3Source reference:
/affected/6/versions2.11.5+dfsg1-1build1Source reference:
/affected/6/versions2.11.5+dfsg1-1build2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm1Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm3Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm4Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm5Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm6Source reference:
/affected/6/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/7/package/name
- Affected versions
- 3.16.0+dfsg-2
Source reference:
/affected/7/versions3.18.0+dfsg-1ubuntu1Source reference:
/affected/7/versions3.19.0+dfsg-1Source reference:
/affected/7/versions3.19.1+dfsg-1Source reference:
/affected/7/versions3.20.0+dfsg-1Source reference:
/affected/7/versions3.20.2+dfsg-1Source reference:
/affected/7/versions3.21.0+dfsg-1Source reference:
/affected/7/versions3.22.0+dfsg-1Source reference:
/affected/7/versions3.24.1+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.2Source reference:
/affected/7/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.26.04.1
Source reference:
/affected/7/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.0.0~git20170725.1.1648deb+dfsg1-1",
"2.0.0~git20170725.1.1648deb+dfsg1-5",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2",
"2.0.0~git20170725.1.1648deb+dfsg1-6",
"2.0.0~git20170725.1.1648deb+dfsg1-6build1",
"2.0.0~git20170725.1.1648deb+dfsg1-7",
"2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1",
"2.1.1+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.2",
"2.2.0+dfsg1-0ubuntu0.18.04.3",
"2.2.0+dfsg1-0ubuntu0.18.04.4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm1",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm2",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm3",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm5",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.0.0~git20190204.1.2693389a+dfsg1-1",
"2.0.0~git20190204.1.2693389a+dfsg1-2",
"2.0.0~git20190204.1.2693389a+dfsg1-2build1",
"2.0.0~git20190204.1.2693389a+dfsg1-2build2",
"2.1.1+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.2",
"2.2.0+dfsg1-0ubuntu0.20.04.3",
"2.2.0+dfsg1-0ubuntu0.20.04.4",
"2.2.0+dfsg1-0ubuntu0.20.04.5",
"2.2.0+dfsg1-0ubuntu0.20.04.6",
"2.6.1+dfsg1-0ubuntu0.20.04.1",
"2.6.1+dfsg1-0ubuntu0.20.04.2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm1",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm3",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.3.0+dfsg1-2build1",
"2.3.0+dfsg1-2ubuntu1",
"2.3.0+dfsg1-2ubuntu2",
"2.4.1+dfsg1-1",
"2.4.1+dfsg1-1ubuntu1",
"2.4.1+dfsg1-1ubuntu2",
"2.5.0+dfsg1-1",
"2.6.0+dfsg1-1",
"2.6.1+dfsg1-1",
"2.6.1+dfsg1-3",
"2.6.1+dfsg1-3ubuntu1",
"2.6.1+dfsg1-3ubuntu2",
"2.6.1+dfsg1-3ubuntu2.1",
"2.6.1+dfsg1-3ubuntu2.2",
"2.6.1+dfsg1-3ubuntu2.3",
"2.6.1+dfsg1-3ubuntu2.4",
"2.6.1+dfsg1-3ubuntu2.5",
"2.6.1+dfsg1-3ubuntu2.6",
"2.6.1+dfsg1-3ubuntu2.7",
"2.6.1+dfsg1-3ubuntu2.8",
"2.6.1+dfsg1-3ubuntu2.9",
"2.6.1+dfsg1-3ubuntu2.10",
"2.6.1+dfsg1-3ubuntu2.11"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.4.0+dfsg1-0ubuntu2",
"3.4.0+dfsg1-0ubuntu3",
"3.4.0+dfsg1-0ubuntu4",
"3.5.0+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1.1",
"3.5.1+dfsg1-0ubuntu1.2",
"3.5.1+dfsg1-0ubuntu1.4",
"3.5.1+dfsg1-0ubuntu1.5",
"3.5.1+dfsg1-0ubuntu1.6",
"3.30.0+dfsg-0ubuntu0.24.04.1",
"3.30.0+dfsg-0ubuntu0.24.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-apps%2Fnoble",
"ecosystem": "Ubuntu:Pro:24.04:LTS"
},
"versions": [
"2.10.0+dfsg1-1.1ubuntu1",
"2.11.2+dfsg1-1",
"2.11.2+dfsg1-1build1",
"2.11.2+dfsg1-1build3",
"2.11.5+dfsg1-1build1",
"2.11.5+dfsg1-1build2",
"2.11.5+dfsg1-1ubuntu0.1~esm1",
"2.11.5+dfsg1-1ubuntu0.1~esm2",
"2.11.5+dfsg1-1ubuntu0.1~esm3",
"2.11.5+dfsg1-1ubuntu0.1~esm4",
"2.11.5+dfsg1-1ubuntu0.1~esm5",
"2.11.5+dfsg1-1ubuntu0.1~esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-client2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-server2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libuwac0-0t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr-tools2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.16.0+dfsg-2",
"3.18.0+dfsg-1ubuntu1",
"3.19.0+dfsg-1",
"3.19.1+dfsg-1",
"3.20.0+dfsg-1",
"3.20.2+dfsg-1",
"3.21.0+dfsg-1",
"3.22.0+dfsg-1",
"3.24.1+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1.1",
"3.30.0+dfsg-0ubuntu0.26.04.1",
"3.30.0+dfsg-0ubuntu0.26.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91946.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server-proxy3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #5834 · Revision 1
- Added to Heist Feed
- Publisher date