{"cves":[{"id":"CVE-2026-27888","published":"2026-02-26T00:00:00","updated_at":"2026-07-10T19:48:16.440004+00:00","description":"\npypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an\nattacker who uses this vulnerability can craft a PDF which leads to the RAM\nbeing exhausted. This requires accessing the `xfa` property of a reader or\nwriter and the corresponding stream being compressed using `/FlateDecode`.\nThis has been fixed in pypdf 6.7.3. As a workaround, apply the patch\nmanually.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.6,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27888","https://github.com/py-pdf/pypdf/commit/7a4c8246ed48d9d328fb596942271da47b6d109c","https://github.com/py-pdf/pypdf/pull/3658","https://github.com/py-pdf/pypdf/releases/tag/6.7.3","https://github.com/py-pdf/pypdf/security/advisories/GHSA-x7hp-r3qg-r3cj"],"bugs":[""],"patches":{"pypdf":[]},"tags":{},"packages":[{"name":"pypdf","source":"https://ubuntu.com/security/cve?package=pypdf","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pypdf","debian":"https://tracker.debian.org/pkg/pypdf","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-27837","published":"2026-02-26T00:00:00","updated_at":"2026-02-27T14:40:03.603420+00:00","description":"\nDottie provides nested object access and manipulation in JavaScript.\nVersions 2.0.4 through 2.0.6 contain an incomplete fix for CVE-2023-26132.\nThe prototype pollution guard introduced in commit `7d3aee1` only validates\nthe first segment of a dot-separated path, allowing an attacker to bypass\nthe protection by placing `__proto__` at any position other than the first.\nBoth `dottie.set()` and `dottie.transform()` are affected. Version 2.0.7\ncontains an updated fix to address the residual vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27837","https://github.com/advisories/GHSA-4gxf-g5gf-22h4","https://github.com/mickhansen/dottie.js/commit/7e8fa1345a4b46325f0eab8d7aeb1c4deaefdb14","https://github.com/mickhansen/dottie.js/security/advisories/GHSA-r5mx-6wc6-7h9w"],"bugs":[""],"patches":{"node-dottie":[]},"tags":{},"packages":[{"name":"node-dottie","source":"https://ubuntu.com/security/cve?package=node-dottie","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-dottie","debian":"https://tracker.debian.org/pkg/node-dottie","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-27830","published":"2026-02-26T00:00:00","updated_at":"2026-08-18T15:31:32.796900+00:00","description":"\nc3p0, a JDBC Connection pooling library, is vulnerable to attack via\nmaliciously crafted Java-serialized objects and `javax.naming.Reference`\ninstances. Several c3p0 `ConnectionPoolDataSource` implementations have a\nproperty called `userOverridesAsString` which conceptually represents a\n`Map<String,Map<String,String>>`. Prior to v0.12.0, that property was\nmaintained as a hex-encoded serialized object. Any attacker able to reset\nthis property, on an existing `ConnectionPoolDataSource` or via maliciously\ncrafted serialized objects or `javax.naming.Reference` instances could be\ntailored execute unexpected code on the application's `CLASSPATH`. The\ndanger of this vulnerability was strongly magnified by vulnerabilities in\nc3p0's main dependency, mchange-commons-java. This library includes code\nthat mirrors early implementations of JNDI functionality, including ungated\nsupport for remote `factoryClassLocation` values. Attackers could set\nc3p0's `userOverridesAsString` hex-encoded serialized objects that include\nobjects \"indirectly serialized\" via JNDI references. Deserialization of\nthose objects and dereferencing of the embedded `javax.naming.Reference`\nobjects could provoke download and execution of malicious code from a\nremote `factoryClassLocation`. Although hazard presented by c3p0's\nvulnerabilites are exarcerbated by vulnerabilities in mchange-commons-java,\nuse of Java-serialized-object hex as the format for a writable Java-Bean\nproperty, of objects that may be exposed across JNDI interfaces, represents\na serious independent fragility. The `userOverridesAsString` property of\nc3p0 `ConnectionPoolDataSource` classes has been reimplemented to use a\nsafe CSV-based format, rather than rely upon potentially dangerous Java\nobject deserialization. c3p0-0.12.0+ and above depend upon\nmchange-commons-java 0.4.0+, which gates support for remote\n`factoryClassLocation` values by configuration parameters that default to\nrestrictive values. c3p0 additionally enforces the new mchange-commons-java\n`com.mchange.v2.naming.nameGuardClassName` to prevent injection of\nunexpected, potentially remote JNDI names. There is no supported workaround\nfor versions of c3p0 prior to 0.12.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"ADJACENT","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","baseMetrics":{"exploitabilityMetrics":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},"baseScore":8.9,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27830","https://github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e","https://github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv","https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal","https://www.mchange.com/projects/c3p0/#configuring_security","https://www.mchange.com/projects/c3p0/#security-note","https://ubuntu.com/security/notices/USN-8642-1"],"bugs":[""],"patches":{"c3p0":[]},"tags":{},"packages":[{"name":"c3p0","source":"https://ubuntu.com/security/cve?package=c3p0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=c3p0","debian":"https://tracker.debian.org/pkg/c3p0","statuses":[{"release_codename":"resolute","status":"released","description":"0.9.1.2-11ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.9.1.2-9+deb8u1ubuntu0.18.04.2","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"0.9.1.2-10ubuntu0.20.04.1+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"0.9.1.2-10ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"0.9.1.2-10ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"testing shows malicious payloads rejected by StreamCorruptedException","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.9.1.2-9+deb8u1ubuntu0.16.04.1~esm2","component":null,"pocket":"esm-apps-legacy"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8642-1"],"notices":[{"id":"USN-8642-1","title":"c3p0 vulnerabilities","summary":"Several security issues were fixed in c3p0.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-08-18T13:02:22.316397","description":"It was discovered that c3p0 was vulnerable to remote code execution via maliciously\ncrafted serialized objects and JNDI references. An attacker could use this to\nexecute arbitrary code, bypass security restrictions, or cause a denial of service.","is_hidden":false,"release_packages":{"bionic":[{"name":"c3p0","version":"0.9.1.2-9+deb8u1ubuntu0.18.04.1+esm1","description":"JDBC Connection pooling library","is_source":true},{"name":"libc3p0-java","version":"0.9.1.2-9+deb8u1ubuntu0.18.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"},{"name":"libc3p0-java-doc","version":"0.9.1.2-9+deb8u1ubuntu0.18.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"c3p0","version":"0.9.1.2-10ubuntu0.20.04.1+esm1","description":"JDBC Connection pooling library","is_source":true},{"name":"libc3p0-java","version":"0.9.1.2-10ubuntu0.20.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"},{"name":"libc3p0-java-doc","version":"0.9.1.2-10ubuntu0.20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"c3p0","version":"0.9.1.2-10ubuntu1+esm1","description":"JDBC Connection pooling library","is_source":true},{"name":"libc3p0-java","version":"0.9.1.2-10ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"},{"name":"libc3p0-java-doc","version":"0.9.1.2-10ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"c3p0","version":"0.9.1.2-10ubuntu2+esm1","description":"JDBC Connection pooling library","is_source":true},{"name":"libc3p0-java","version":"0.9.1.2-10ubuntu2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"},{"name":"libc3p0-java-doc","version":"0.9.1.2-10ubuntu2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"}],"resolute":[{"name":"c3p0","version":"0.9.1.2-11ubuntu0.1~esm1","description":"JDBC Connection pooling library","is_source":true},{"name":"libc3p0-java","version":"0.9.1.2-11ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"},{"name":"libc3p0-java-doc","version":"0.9.1.2-11ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/c3p0","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2026-55223","CVE-2026-27830","CVE-2026-27727","CVE-2026-55153"]}]},{"id":"CVE-2026-27821","published":"2026-02-26T00:00:00","updated_at":"2026-08-17T19:18:00.752999+00:00","description":"\nGPAC is an open-source multimedia framework. In versions up to and\nincluding 26.02.0, a stack buffer overflow occurs during NHML file parsing\nin `src/filters/dmx_nhml.c`. The value of the xmlHeaderEnd XML attribute is\ncopied from att->value into szXmlHeaderEnd[1000] using strcpy() without any\nlength validation. If the input exceeds 1000 bytes, it overwrites beyond\nthe stack buffer boundary. Commit 9bd7137fded2db40de61a2cf3045812c8741ec52\npatches the issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":7.7,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27821","https://github.com/gpac/gpac/commit/9bd7137fded2db40de61a2cf3045812c8741ec52","https://github.com/gpac/gpac/security/advisories/GHSA-q7qh-8r2r-q559"],"bugs":[""],"patches":{"gpac":[]},"tags":{},"packages":[{"name":"gpac","source":"https://ubuntu.com/security/cve?package=gpac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gpac","debian":"https://tracker.debian.org/pkg/gpac","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-27809","published":"2026-02-26T00:00:00","updated_at":"2026-07-10T19:49:57.952188+00:00","description":"\npsd-tools is a Python package for working with Adobe Photoshop PSD files.\nPrior to version 1.12.2, when a PSD file contains malformed RLE-compressed\nimage data (e.g. a literal run that extends past the expected row size),\ndecode_rle() raises ValueError which propagated all the way to the user,\ncrashing psd.composite() and psd-tools export. decompress() already had a\nfallback that replaces failed channels with black pixels when result is\nNone, but it never triggered because the ValueError from decode_rle() was\nnot caught. The fix in version 1.12.2 wraps the decode_rle() call in a\ntry/except so the existing fallback handles the error gracefully.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27809","https://github.com/psd-tools/psd-tools/commit/6c0a78f195b5942757886a1863793fd5946c1fb1","https://github.com/psd-tools/psd-tools/releases/tag/v1.12.2","https://github.com/psd-tools/psd-tools/security/advisories/GHSA-24p2-j2jr-386w"],"bugs":[""],"patches":{"psd-tools":[]},"tags":{},"packages":[{"name":"psd-tools","source":"https://ubuntu.com/security/cve?package=psd-tools","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=psd-tools","debian":"https://tracker.debian.org/pkg/psd-tools","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-27799","published":"2026-02-26T00:00:00","updated_at":"2026-06-26T00:44:51.416293+00:00","description":"\nImageMagick is free and open-source software used for editing and\nmanipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a\nheap buffer over-read vulnerability exists in the DJVU image format\nhandler. The vulnerability occurs due to integer truncation when\ncalculating the stride (row size) for pixel buffer allocation. The stride\ncalculation overflows a 32-bit signed integer, resulting in an\nout-of-bounds memory reads. Versions 7.1.2-15 and 6.9.13-40 contain a\npatch.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":4.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27799","https://github.com/ImageMagick/ImageMagick/commit/e87695b3227978ad70b967b8d054baaf8ac2cced","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r99p-5442-q2x2","https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3","https://ubuntu.com/security/notices/USN-8468-1"],"bugs":[""],"patches":{"imagemagick":[]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","component":null,"pocket":"esm-apps"},{"release_codename":"questing","status":"not-affected","description":"8:7.1.2.3+dfsg1-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8:7.1.2.18+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.13+esm22","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"upstream","status":"released","description":"6.9.13-40, 7.1.2-15","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.16+esm21","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8468-1"],"notices":[{"id":"USN-8468-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-06-24T17:45:05.762557","description":"It was discovered that ImageMagick incorrectly handled certain images\nwhen using the wavelet-denoise operator. An attacker could possibly use\nthis issue to trigger a heap buffer over-read, resulting in information\ndisclosure. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-27798)\n\nIt was discovered that ImageMagick incorrectly handled certain DJVU\nimages. An attacker could possibly use this issue to trigger a heap\nbuffer over-read, resulting in information disclosure. (CVE-2026-27799)\n\nIt was discovered that ImageMagick incorrectly handled certain MNG\nimages. An attacker could possibly use this issue to trigger a stack\nbuffer overflow, resulting in arbitrary code execution. (CVE-2026-28690)\n\nIt was discovered that ImageMagick incorrectly handled certain JBIG\nimages. An attacker could possibly use this issue to trigger a pointer\ndereference error, resulting in a denial of service. (CVE-2026-28691)\n\nIt was discovered that ImageMagick incorrectly handled certain MAT\nimages. An attacker could possibly use this issue to trigger a heap\nbuffer over-read, resulting in information disclosure. (CVE-2026-28692)\n\nIt was discovered that ImageMagick incorrectly handled certain DIB\nimages. An attacker could possibly use this issue to trigger an integer\noverflow, resulting in arbitrary code execution. (CVE-2026-28693)","is_hidden":false,"release_packages":{"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"imagemagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-9t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-9t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-7-extra","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-7-extra","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm22","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm21","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-28691","CVE-2026-27798","CVE-2026-28692","CVE-2026-27799","CVE-2026-28693","CVE-2026-28690"]}]},{"id":"CVE-2026-27798","published":"2026-02-26T00:00:00","updated_at":"2026-06-26T00:44:51.416293+00:00","description":"\nImageMagick is free and open-source software used for editing and\nmanipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a\nheap buffer over-read vulnerability occurs when processing an image with\nsmall dimension using the `-wavelet-denoise` operator. Versions 7.1.2-15\nand 6.9.13-40 contain a patch.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27798","https://github.com/ImageMagick/ImageMagick/commit/0377e60b3c0d766bd7271221c95d9ee54f6a3738","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpgx-jfcq-r59f","https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3","https://ubuntu.com/security/notices/USN-8468-1"],"bugs":[""],"patches":{"imagemagick":[]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","component":null,"pocket":"esm-apps"},{"release_codename":"resolute","status":"not-affected","description":"8:7.1.2.15+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.9.13-40, 7.1.2-15","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":["USN-8468-1"],"notices":[{"id":"USN-8468-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-06-24T17:45:05.762557","description":"It was discovered that ImageMagick incorrectly handled certain images\nwhen using the wavelet-denoise operator. An attacker could possibly use\nthis issue to trigger a heap buffer over-read, resulting in information\ndisclosure. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-27798)\n\nIt was discovered that ImageMagick incorrectly handled certain DJVU\nimages. An attacker could possibly use this issue to trigger a heap\nbuffer over-read, resulting in information disclosure. (CVE-2026-27799)\n\nIt was discovered that ImageMagick incorrectly handled certain MNG\nimages. An attacker could possibly use this issue to trigger a stack\nbuffer overflow, resulting in arbitrary code execution. (CVE-2026-28690)\n\nIt was discovered that ImageMagick incorrectly handled certain JBIG\nimages. An attacker could possibly use this issue to trigger a pointer\ndereference error, resulting in a denial of service. (CVE-2026-28691)\n\nIt was discovered that ImageMagick incorrectly handled certain MAT\nimages. An attacker could possibly use this issue to trigger a heap\nbuffer over-read, resulting in information disclosure. (CVE-2026-28692)\n\nIt was discovered that ImageMagick incorrectly handled certain DIB\nimages. An attacker could possibly use this issue to trigger an integer\noverflow, resulting in arbitrary code execution. (CVE-2026-28693)","is_hidden":false,"release_packages":{"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"imagemagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-9t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-9t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-7-extra","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-7-extra","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm22","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.13+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm21","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.16+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-28691","CVE-2026-27798","CVE-2026-28692","CVE-2026-27799","CVE-2026-28693","CVE-2026-28690"]}]},{"id":"CVE-2026-27951","published":"2026-02-25T22:16:00","updated_at":"2026-07-20T18:01:27.398901+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, the function `Stream_EnsureCapacity` can create an endless\nblocking loop. This may affect all client and server implementations using\n`FreeRDP`. For practical exploitation this will only work on 32bit systems\nwhere the available physical memory is `>= SIZE_MAX`. Version 3.23.0\ncontains a patch. No known workarounds are available.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"The commit listed below resulted in a regression and was backed\nout by USN-8105-2. See LP bug."}],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27951","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927","https://ubuntu.com/security/notices/USN-8105-1","https://ubuntu.com/security/notices/USN-8105-2","https://ubuntu.com/security/notices/USN-8561-1"],"bugs":["https://bugs.launchpad.net/ubuntu/+source/freerdp3/+bug/2144889 (regression)"],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113"]},"tags":{},"packages":[{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.30.0+dfsg-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"}]},{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1","USN-8561-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]},{"id":"USN-8561-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2026-07-20T11:49:26.882744","description":"It was discovered that FreeRDP contained multiple security issues. An\nattacker could possibly use these issues to obtain sensitive information,\ncause FreeRDP to crash, resulting in a denial of service, or execute\narbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"freerdp3-wayland","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"freerdp3-x11","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libfreerdp3-3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwinpr3-3","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"libwinpr3-dev","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"},{"name":"winpr3-utils","version":"3.30.0+dfsg-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.24.04.1","pocket":"security"}],"resolute":[{"name":"freerdp3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp-proxy","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp-proxy-modules","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp-sdl","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp-shadow-x11","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp-wayland","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp-x11","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp3-dev","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp3-proxy","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp3-sdl","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp3-wayland","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"freerdp3-x11","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libfreerdp3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwinpr3-3","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"libwinpr3-dev","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"winpr-utils","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"},{"name":"winpr3-utils","version":"3.30.0+dfsg-0ubuntu0.26.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.30.0+dfsg-0ubuntu0.26.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-33995","CVE-2026-57157","CVE-2026-33952","CVE-2026-55648","CVE-2026-44422","CVE-2026-55194","CVE-2026-29775","CVE-2026-40254","CVE-2026-55192","CVE-2026-33984","CVE-2026-31897","CVE-2026-44420","CVE-2026-31806","CVE-2026-56297","CVE-2026-57158","CVE-2026-27951","CVE-2026-33986","CVE-2026-55191","CVE-2026-31883","CVE-2026-29774","CVE-2026-55193","CVE-2026-57156","CVE-2026-33987","CVE-2026-31884","CVE-2026-55827","CVE-2026-33983","CVE-2026-33985","CVE-2026-44421","CVE-2026-33982","CVE-2026-29776","CVE-2026-33977","CVE-2026-55564","CVE-2026-40033","CVE-2026-31885"]}]},{"id":"CVE-2026-27950","published":"2026-02-25T22:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, the fix for the heap-use-after-free described in\nCVE-2026-24680 is incomplete. While the vulnerable execution flow\nreferenced in the advisory exists in the SDL2 implementation, the fix\nappears to have been applied only to the SDL3 code path. In the SDL2\nimplementation, the pointer is not nulled after free. This creates a\nsituation where the advisory suggests the vulnerability is fully resolved,\nwhile builds or environments still using SDL2 may retain the vulnerable\nlogic. A complete fix is available in version 3.23.0.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"The backport for CVE-2026-24680 in noble already fixes this\nissue."}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27950","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rvfg-86cr-5r6p","https://github.com/FreeRDP/FreeRDP/blob/master/client/SDL/SDL2/sdl_pointer.cpp#L63-L64","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/5f62aa11c1bdf00f94c40ea9ebb260a752740b80"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-26986","published":"2026-02-25T22:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow`\npointer during `HashTable_Free` cleanup because `xf_rail_window_common`\ncalls `free(appWindow)` on title allocation failure without first removing\nthe entry from the `railWindows` hash table, leaving a dangling pointer\nthat is freed again on disconnect. Version 3.23.0 fixes the vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-26986","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-crqx-g6x5-rx47","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1297","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1316-L1327","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L386-L394","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L395-L399","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L401-L404","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/b4f0f0a18fe53aa8d47d062f91471f4e9c5e0d51"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-3172","published":"2026-02-25T21:16:00","updated_at":"2026-03-04T15:16:17.162769+00:00","description":"\nBuffer overflow in parallel HNSW index build in pgvector 0.6.0 through\n0.8.1 allows a database user to leak sensitive data from other relations or\ncrash the database server.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-3172","https://github.com/pgvector/pgvector/issues/959"],"bugs":[""],"patches":{"pgvector":[]},"tags":{},"packages":[{"name":"pgvector","source":"https://ubuntu.com/security/cve?package=pgvector","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pgvector","debian":"https://tracker.debian.org/pkg/pgvector","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-2845","published":"2026-02-25T21:16:00","updated_at":"2026-03-04T15:14:35.891953+00:00","description":"\nAn issue has been discovered in GitLab CE/EE affecting all versions from\n11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could\nhave allowed an authenticated user to cause denial of service by exploiting\na Bitbucket Server import endpoint via repeatedly sending large responses.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"GitLab isn't maintainable as a distro package, and was removed\nfrom Ubuntu because of this. We will not be fixing security\nissues in the gitlab package in Xenial."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-2845","https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/","https://gitlab.com/gitlab-org/gitlab/-/work_items/570554"],"bugs":[""],"patches":{"gitlab":[]},"tags":{},"packages":[{"name":"gitlab","source":"https://ubuntu.com/security/cve?package=gitlab","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gitlab","debian":"https://tracker.debian.org/pkg/gitlab","statuses":[{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-27015","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, a missing bounds check in\n`smartcard_unpack_read_size_align()`\n(`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server to\ncrash the FreeRDP client via a reachable `WINPR_ASSERT` → `abort()`. The\ncrash occurs in upstream builds where `WITH_VERBOSE_WINPR_ASSERT=ON`\n(default in FreeRDP 3.22.0 / current WinPR CMake defaults). Smartcard\nredirection must be explicitly enabled by the user (e.g., `xfreerdp\n/smartcard`; `/smartcard-logon` implies `/smartcard`). Version 3.23.0 fixes\nthe issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27015","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7g72-39pq-4725","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/65d59d3b3c2f630f2ea862687ecf5f95f8115244"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-26965","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, in the RLE planar decode path,\n`planar_decompress_plane_rle()` writes into `pDstData` at `((nYDst+y) *\nnDstStep) + (4*nXDst) + nChannel` without verifying that\n`(nYDst+nSrcHeight)` fits in the destination height or that\n`(nXDst+nSrcWidth)` fits in the destination stride. When `TempFormat !=\nDstFormat`, `pDstData` becomes `planar->pTempData` (sized for the desktop),\nwhile `nYDst` is only validated against the **surface** by\n`is_within_surface()`. A malicious RDP server can exploit this to perform a\nheap out-of-bounds write with attacker-controlled offset and pixel data on\nany connecting FreeRDP client. The OOB write reaches up to 132,096 bytes\npast the temp buffer end, and  on the brk heap (desktop ≤ 128×128), an\nadjacent `NSC_CONTEXT` struct's `decode` function pointer is overwritten\nwith attacker-controlled pixel data — control-flow–relevant corruption\n(function pointer overwritten) demonstrated under deterministic heap layout\n(`nsc->decode = 0xFF414141FF414141`). Version 3.23.0 fixes the\nvulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-26965","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5vgf-mw4f-r33h","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/a0be5cb87d760bb1c803ad1bb835aa1e73e62abc"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-26955","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, a malicious RDP server can trigger a heap buffer overflow\nin FreeRDP clients using the GDI surface pipeline (e.g., `xfreerdp`) by\nsending an RDPGFX ClearCodec surface command with an out-of-bounds\ndestination rectangle. The `gdi_SurfaceCommand_ClearCodec()` handler does\nnot call `is_within_surface()` to validate the command rectangle against\nthe destination surface dimensions, allowing attacker-controlled\n`cmd->left`/`cmd->top` (and subcodec rectangle offsets) to reach image copy\nroutines that write into `surface->data` without bounds enforcement. The\nOOB write corrupts an adjacent `gdiGfxSurface` struct's `codecs*` pointer\nwith attacker-controlled pixel data, and corruption of `codecs*` is\nsufficient to reach an indirect function pointer call (`NSC_CONTEXT.decode`\nat `nsc.c:500`) on a subsequent codec command — full instruction pointer\n(RIP) control demonstrated in exploitability harness. Users should upgrade\nto version 3.23.0 to receive a patch.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-26955","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mr6w-ch7c-mqqj","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/7d8fdce2d0ef337cb86cb37fc0c436c905e04d77"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-26271","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()`\n(libfreerdp/codec/color.c) can be triggered by crafted RDP Window Icon\n(TS_ICON_INFO) data. The bug is reachable over the network when a client\nprocesses icon data from an RDP server (or from a man-in-the-middle).\nVersion 3.23.0 fixes the issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-26271","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hr4m-ph4g-48j6","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/f5e20403d6e325e11b68129803f967fb5aeec1cb"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-25997","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats`\nmemory because `xf_clipboard_formats_free` (called from the cliprdr channel\nthread during auto-reconnect) frees the array while the X11 event thread\nconcurrently iterates it in `xf_clipboard_changed`, triggering a heap use\nafter free. Version 3.23.0 fixes the issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-25997","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5j3-m6jf-3jq4","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1884","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1889","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L265","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L616","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L831","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L851-L855","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L868-L875","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/58409406afe7c2a8a71ed2dc8e22075be4f41c0c"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-25959","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to\n`XChangeProperty` because the cliprdr channel thread calls\n`xf_cliprdr_server_format_data_response` which converts and uses the\nclipboard data without holding any lock, while the X11 event thread\nconcurrently calls `xf_cliprdr_clear_cached_data` → `HashTable_Clear` which\nfrees the same data via `xf_cached_data_free`, triggering a heap use after\nfree. Version 3.23.0 fixes the issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-25959","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78xg-v4p2-4w3c","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1229-L1243","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1337-L1344","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L200-L208","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2295","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2323-L2334","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2363","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L933","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/d3e8b3b9365be96a4f11dda149d71b3287227d0a"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-25955","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage`\nwhose `data` pointer references a freed RDPGFX surface buffer, because\n`gdi_DeleteSurface` frees `surface->data` without invalidating the\n`appWindow->image` that aliases it. Version 3.23.0 fixes the issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-25955","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g54-x8v7-559x","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1484-L1492","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1494-L1500","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1528","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L1224-L1227","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/169d358734509e82663a0d6a0085ae726d439d8e"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]},{"id":"CVE-2026-25954","published":"2026-02-25T21:16:00","updated_at":"2026-03-18T17:35:28.428799+00:00","description":"\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to\nversion 3.23.0, `xf_rail_server_local_move_size` dereferences a freed\n`xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected\npointer from the `railWindows` hash table, and the main thread can\nconcurrently delete the window (via a window delete order) while the RAIL\nchannel thread is still using the pointer. Version 3.23.0 fixes the issue.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commit as CVE-2026-25952"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-25954","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1076","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1133","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1347","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1350-L1359","https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L647","https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cc88-4j37-mw6j","https://ubuntu.com/security/notices/USN-8105-1"],"bugs":[""],"patches":{"freerdp":[],"freerdp2":[],"freerdp3":["upstream: https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5"]},"tags":{},"packages":[{"name":"freerdp","source":"https://ubuntu.com/security/cve?package=freerdp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp","debian":"https://tracker.debian.org/pkg/freerdp","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp2","source":"https://ubuntu.com/security/cve?package=freerdp2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp2","debian":"https://tracker.debian.org/pkg/freerdp2","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"freerdp3","source":"https://ubuntu.com/security/cve?package=freerdp3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freerdp3","debian":"https://tracker.debian.org/pkg/freerdp3","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.24.1+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.23.0","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.1+dfsg1-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.16.0+dfsg-2ubuntu0.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-8105-1"],"notices":[{"id":"USN-8105-1","title":"FreeRDP vulnerabilities","summary":"Several security issues were fixed in FreeRDP.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-18T12:03:18.131050","description":"It was discovered that FreeRDP incorrectly handled certain RDP packets. A\nremote attacker could use this issue to cause FreeRDP to crash, resulting\nin a denial of service, or possibly execute arbitrary code.","is_hidden":false,"release_packages":{"noble":[{"name":"freerdp3","version":"3.5.1+dfsg1-0ubuntu1.4","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-wayland","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"freerdp3-x11","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libfreerdp3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-3","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"libwinpr3-dev","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"},{"name":"winpr3-utils","version":"3.5.1+dfsg1-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.5.1+dfsg1-0ubuntu1.4","pocket":"security"}],"questing":[{"name":"freerdp3","version":"3.16.0+dfsg-2ubuntu0.3","description":"RDP client for Windows Terminal Services","is_source":true},{"name":"freerdp3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-proxy-modules","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-sdl","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-shadow-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-wayland","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"freerdp3-x11","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-client3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server-proxy3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-server3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow-subsystem3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp-shadow3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libfreerdp3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr-tools3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-3","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"libwinpr3-dev","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"},{"name":"winpr3-utils","version":"3.16.0+dfsg-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freerdp3","version_link":"https://launchpad.net/ubuntu/+source/freerdp3/3.16.0+dfsg-2ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-25954","CVE-2026-22851","CVE-2026-27950","CVE-2026-25952","CVE-2026-23534","CVE-2026-27951","CVE-2026-25955","CVE-2026-22852","CVE-2026-22859","CVE-2026-22855","CVE-2026-22854","CVE-2026-25941","CVE-2026-23530","CVE-2026-25959","CVE-2026-22858","CVE-2026-23531","CVE-2026-25942","CVE-2026-26986","CVE-2026-23884","CVE-2026-22857","CVE-2026-23883","CVE-2026-27015","CVE-2026-26955","CVE-2026-22856","CVE-2026-23532","CVE-2026-23732","CVE-2026-25953","CVE-2026-26271","CVE-2026-23533","CVE-2026-26965","CVE-2026-22853","CVE-2026-25997"]}]}],"offset":15040,"limit":20,"total_results":79316}