Ubuntu USN · USN-8432-1

FreeRDP vulnerabilities

Published: Tue, 16 Jun 2026 08:41

CVE-2026-45700

Summary

Several security issues were fixed in FreeRDP.

Details

It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to an out-of-bounds heap write. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-45700) In addition, this update fixes a regression introduced in USN-8105-1. The update introduces a complete fix for CVE-2026-22858, CVE-2026-23732 and CVE-2026-25952 in Ubuntu 24.04 LTS and Ubuntu 25.10.

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu bionic

freerdp2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-dev→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-shadow-x11→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-shadow-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-wayland→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-wayland
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-x11→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-client2-2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-client2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server2-2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow-subsystem2-2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow-subsystem2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow2-2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp2-2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libuwac0-0→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libuwac0-dev→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr-tools2-2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr-tools2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr2-2→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr2-dev→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
winpr-utils→2.2.0+dfsg1-0ubuntu0.18.04.4+esm6apt_upgrade
Standard apt upgrade. Install 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu focal

freerdp2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-dev→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-shadow-x11→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-shadow-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-wayland→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-wayland
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-x11→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-client2-2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-client2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server2-2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow-subsystem2-2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow-subsystem2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow2-2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp2-2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libuwac0-0→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libuwac0-dev→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr-tools2-2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr-tools2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr2-2→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr2-dev→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
winpr-utils→2.6.1+dfsg1-0ubuntu0.20.04.2+esm4apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu jammy

freerdp2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-dev→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-shadow-x11→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-shadow-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-wayland→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-wayland
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-x11→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-client2-2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-client2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server2-2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow-subsystem2-2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow-subsystem2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow2-2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp2-2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libuwac0-0→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libuwac0-dev→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr-tools2-2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr-tools2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr2-2→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-2
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr2-dev→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
winpr-utils→2.6.1+dfsg1-3ubuntu2.11apt_upgrade
Standard apt upgrade. Install 2.6.1+dfsg1-3ubuntu2.11 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu noble

freerdp2→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
freerdp3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp2-dev→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-dev=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
freerdp2-shadow-x11→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-shadow-x11=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
freerdp2-wayland→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-wayland=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
freerdp2-x11→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp2-x11=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
freerdp3-dev→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-shadow-x11→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-shadow-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-wayland→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-wayland
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-x11→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-client2-2t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-client2-2t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libfreerdp-client3-3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-client3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server2-2t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server2-2t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libfreerdp-server3-3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow-subsystem2-2t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow-subsystem2-2t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libfreerdp-shadow-subsystem3-3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow-subsystem3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow2-2t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow2-2t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libfreerdp-shadow3-3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp2-2t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp2-2t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libfreerdp3-3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libuwac0-0t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-0t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libuwac0-dev→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libuwac0-dev=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libwinpr-tools2-2t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr-tools2-2t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libwinpr-tools3-3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr-tools3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr2-2t64→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-2t64=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libwinpr2-dev→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr2-dev=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
libwinpr3-3→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr3-dev→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr3-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
winpr-utils→2.11.5+dfsg1-1ubuntu0.1~esm6apt_upgrade_esm
Fixed at 2.11.5+dfsg1-1ubuntu0.1~esm6 — ESM-only. Enable Ubuntu Pro (free for 5 personal machines) or treat as watch item.
```
sudo pro attach <token>
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr-utils=2.11.5+dfsg1-1ubuntu0.1~esm6
```
Sign up at https://ubuntu.com/pro. Free for personal + small-team use.
winpr3-utils→3.5.1+dfsg1-0ubuntu1.6apt_upgrade
Standard apt upgrade. Install 3.5.1+dfsg1-0ubuntu1.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr3-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu questing

freerdp3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-dev→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-proxy→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-proxy
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-proxy-modules→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-proxy-modules
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-sdl→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-sdl
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-shadow-x11→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-shadow-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-wayland→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-wayland
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-x11→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-client3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-client3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server-proxy3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server-proxy3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow-subsystem3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow-subsystem3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr-tools3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr-tools3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr3-3→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr3-dev→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr3-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
winpr3-utils→3.16.0+dfsg-2ubuntu0.5apt_upgrade
Standard apt upgrade. Install 3.16.0+dfsg-2ubuntu0.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr3-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu resolute

freerdp3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp-proxy→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp-proxy
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp-proxy-modules→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp-proxy-modules
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp-sdl→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp-sdl
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp-shadow-x11→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp-shadow-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp-wayland→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp-wayland
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp-x11→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-dev→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-proxy→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-proxy
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-proxy-modules→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-proxy-modules
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-sdl→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-sdl
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-shadow-x11→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-shadow-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-wayland→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-wayland
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
freerdp3-x11→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y freerdp3-x11
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-client3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-client3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server-proxy3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server-proxy3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-server3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-server3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow-subsystem3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow-subsystem3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp-shadow3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp-shadow3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libfreerdp3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libfreerdp3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr-tools3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr-tools3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr3-3→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr3-3
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libwinpr3-dev→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libwinpr3-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
winpr-utils→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
winpr3-utils→3.24.2+dfsg-1ubuntu1.1apt_upgrade
Standard apt upgrade. Install 3.24.2+dfsg-1ubuntu1.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y winpr3-utils
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8432-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8432-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

References

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.

Buy lifetime →See StackPatch →Live audit log →