News: 0001615871

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

FreeRDP 3.23 Addresses 11 CVEs, Improved SDL Client

([Free Software] 17 Minutes Ago FreeRDP 3.23)


For those making use of the open-source FreeRDP project for your Remote Desktop Protocol (RDP) needs, FreeRDP 3.23 is out today with 11 CVEs addressed in taking care of various security-related issues that have been uncovered.

FreeRDP 3.23 addresses 11 different CVEs assigned this year that the developers sorted through following an in-depth analysis of the FreeRDP client code. FreeRDP 3.23 should be much better now on the client security side. The CVEs include CVE-2026-26965, CVE-2026-26955, CVE-2026-26271, CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954, CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, and CVE-2026-25941. The issues include multiple out-of-bounds writes, client denial of service possibilities, heap-use-after-free bugs, a global buffer overflow, and more. Separately there is also another integer overflow fixi n this FreeRDP release too.

FreeRDP 3.23 also introduces configuration isolation support.

For end users the FreeRDP 3.23 release is also exciting for improvements to its SDL client. The FreeRDP SDL client now supports multiple monitors as well as HiDPI modes being in much better shape.

Downloads and more details on the FreeRDP 3.23 release via [1]GitHub .



[1] https://github.com/FreeRDP/FreeRDP/releases/tag/3.23.0


Here is a simple experiment that will teach you an important electrical
lesson: On a cool, dry day, scuff your feet along a carpet, then reach your
hand into a friend's mouth and touch one of his dental fillings. Did you
notice how your friend twitched violently and cried out in pain? This
teaches us that electricity can be a very powerful force, but we must never
use it to hurt others unless we need to learn an important electrical lesson.
It also teaches us how an electrical circuit works. When you scuffed
your feet, you picked up batches of "electrons", which are very small objects
that carpet manufacturers weave into carpets so they will attract dirt.
The electrons travel through your bloodstream and collect in your finger,
where they form a spark that leaps to your friend's filling, then travels
down to his feet and back into the carpet, thus completing the circuit.
Amazing Electronic Fact: If you scuffed your feet long enough without
touching anything, you would build up so many electrons that your finger
would explode! But this is nothing to worry about unless you have
carpeting.
-- Dave Barry, "What is Electricity?"