CriticalFix available
UBUNTU-CVE-2026-67289
FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the proxy CONNECT request line and Host header by http_proxy_connect() without filtering. A malicious or compromised RDP server can send a crafted redirection PDU containing embedded control characters to inject arbitrary headers/requests into the HTTP proxy CONNECT request.
Announced Source revision 1
Original source ↗UBUNTU-CVE-2026-67289
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-67289
freerdp
Source reference: /affected/0/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/1/package/name
- Affected versions
- 2.0.0~git20170725.1.1648deb+dfsg1-1
Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6build1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1Source reference:
/affected/1/versions2.1.1+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm5Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm6Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp
Source reference: /affected/2/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1
Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/3/package/name
- Affected versions
- 2.0.0~git20190204.1.2693389a+dfsg1-1
Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build1Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build2Source reference:
/affected/3/versions2.1.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.3Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.4Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.5Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.6Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm3Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm4Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/4/package/name
- Affected versions
- 2.3.0+dfsg1-2build1
Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu1Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu2Source reference:
/affected/4/versions2.4.1+dfsg1-1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu2Source reference:
/affected/4/versions2.5.0+dfsg1-1Source reference:
/affected/4/versions2.6.0+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.4Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.5Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.6Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.7Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.8Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.9Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.10Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.11Source reference:
/affected/4/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/5/package/name
- Affected versions
- 3.4.0+dfsg1-0ubuntu2
Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu3Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu4Source reference:
/affected/5/versions3.5.0+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.2Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.4Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.5Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.6Source reference:
/affected/5/versions - Fixed versions
- 3.30.0+dfsg-0ubuntu0.24.04.1
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/6/package/name
- Affected versions
- 2.10.0+dfsg1-1.1ubuntu1
Source reference:
/affected/6/versions2.11.2+dfsg1-1Source reference:
/affected/6/versions2.11.2+dfsg1-1build1Source reference:
/affected/6/versions2.11.2+dfsg1-1build3Source reference:
/affected/6/versions2.11.5+dfsg1-1build1Source reference:
/affected/6/versions2.11.5+dfsg1-1build2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm1Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm3Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm4Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm5Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm6Source reference:
/affected/6/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/7/package/name
- Affected versions
- 3.16.0+dfsg-2
Source reference:
/affected/7/versions3.18.0+dfsg-1ubuntu1Source reference:
/affected/7/versions3.19.0+dfsg-1Source reference:
/affected/7/versions3.19.1+dfsg-1Source reference:
/affected/7/versions3.20.0+dfsg-1Source reference:
/affected/7/versions3.20.2+dfsg-1Source reference:
/affected/7/versions3.21.0+dfsg-1Source reference:
/affected/7/versions3.22.0+dfsg-1Source reference:
/affected/7/versions3.24.1+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1.1Source reference:
/affected/7/versions - Fixed versions
- 3.30.0+dfsg-0ubuntu0.26.04.1
Source reference:
/affected/7/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.0.0~git20170725.1.1648deb+dfsg1-1",
"2.0.0~git20170725.1.1648deb+dfsg1-5",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2",
"2.0.0~git20170725.1.1648deb+dfsg1-6",
"2.0.0~git20170725.1.1648deb+dfsg1-6build1",
"2.0.0~git20170725.1.1648deb+dfsg1-7",
"2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1",
"2.1.1+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.2",
"2.2.0+dfsg1-0ubuntu0.18.04.3",
"2.2.0+dfsg1-0ubuntu0.18.04.4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm1",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm2",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm3",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm5",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.0.0~git20190204.1.2693389a+dfsg1-1",
"2.0.0~git20190204.1.2693389a+dfsg1-2",
"2.0.0~git20190204.1.2693389a+dfsg1-2build1",
"2.0.0~git20190204.1.2693389a+dfsg1-2build2",
"2.1.1+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.2",
"2.2.0+dfsg1-0ubuntu0.20.04.3",
"2.2.0+dfsg1-0ubuntu0.20.04.4",
"2.2.0+dfsg1-0ubuntu0.20.04.5",
"2.2.0+dfsg1-0ubuntu0.20.04.6",
"2.6.1+dfsg1-0ubuntu0.20.04.1",
"2.6.1+dfsg1-0ubuntu0.20.04.2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm1",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm3",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.3.0+dfsg1-2build1",
"2.3.0+dfsg1-2ubuntu1",
"2.3.0+dfsg1-2ubuntu2",
"2.4.1+dfsg1-1",
"2.4.1+dfsg1-1ubuntu1",
"2.4.1+dfsg1-1ubuntu2",
"2.5.0+dfsg1-1",
"2.6.0+dfsg1-1",
"2.6.1+dfsg1-1",
"2.6.1+dfsg1-3",
"2.6.1+dfsg1-3ubuntu1",
"2.6.1+dfsg1-3ubuntu2",
"2.6.1+dfsg1-3ubuntu2.1",
"2.6.1+dfsg1-3ubuntu2.2",
"2.6.1+dfsg1-3ubuntu2.3",
"2.6.1+dfsg1-3ubuntu2.4",
"2.6.1+dfsg1-3ubuntu2.5",
"2.6.1+dfsg1-3ubuntu2.6",
"2.6.1+dfsg1-3ubuntu2.7",
"2.6.1+dfsg1-3ubuntu2.8",
"2.6.1+dfsg1-3ubuntu2.9",
"2.6.1+dfsg1-3ubuntu2.10",
"2.6.1+dfsg1-3ubuntu2.11"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.30.0+dfsg-0ubuntu0.24.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.4.0+dfsg1-0ubuntu2",
"3.4.0+dfsg1-0ubuntu3",
"3.4.0+dfsg1-0ubuntu4",
"3.5.0+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1.1",
"3.5.1+dfsg1-0ubuntu1.2",
"3.5.1+dfsg1-0ubuntu1.4",
"3.5.1+dfsg1-0ubuntu1.5",
"3.5.1+dfsg1-0ubuntu1.6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.30.0+dfsg-0ubuntu0.24.04.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-apps%2Fnoble",
"ecosystem": "Ubuntu:Pro:24.04:LTS"
},
"versions": [
"2.10.0+dfsg1-1.1ubuntu1",
"2.11.2+dfsg1-1",
"2.11.2+dfsg1-1build1",
"2.11.2+dfsg1-1build3",
"2.11.5+dfsg1-1build1",
"2.11.5+dfsg1-1build2",
"2.11.5+dfsg1-1ubuntu0.1~esm1",
"2.11.5+dfsg1-1ubuntu0.1~esm2",
"2.11.5+dfsg1-1ubuntu0.1~esm3",
"2.11.5+dfsg1-1ubuntu0.1~esm4",
"2.11.5+dfsg1-1ubuntu0.1~esm5",
"2.11.5+dfsg1-1ubuntu0.1~esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-client2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-server2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libuwac0-0t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr-tools2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.30.0+dfsg-0ubuntu0.26.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.16.0+dfsg-2",
"3.18.0+dfsg-1ubuntu1",
"3.19.0+dfsg-1",
"3.19.1+dfsg-1",
"3.20.0+dfsg-1",
"3.20.2+dfsg-1",
"3.21.0+dfsg-1",
"3.22.0+dfsg-1",
"3.24.1+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-67289.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-proxy",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-proxy-modules",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-sdl",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-shadow-x11",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-wayland",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-x11",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy-modules",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-sdl",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server-proxy3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr-utils",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.30.0+dfsg-0ubuntu0.26.04.1"
}
],
"availability": "No subscription required"
}
}
]- Related CVEs
- CVE-2026-67289
Source reference:
/upstream
Publisher severity
critical
Source reference: /severity/0/score
- Event
- #83941 · Revision 1
- Added to Heist Feed
- Publisher date