CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/rdesktop 1.9.0_1

RDP client for Windows NT/2000/2003 Terminal Server

Port info

Maintainer
freebsd@gregv.net
Packages
latest: 1.9.0_1
Upstream
Higher version available: 1.9.1
Last update
to 1.9.0_1 · 64631af5a7
Quarterly
2026Q4: 1.9.0_1
WWW
http://www.rdesktop.org/
Links
cgit · VuXML

Install

Package
# pkg install rdesktop
installs 1.9.0_1 from latest; from quarterly (2026Q4) 1.9.0_1
Port
# cd /usr/ports/net/rdesktop && make install clean
# make -C /usr/ports/net/rdesktop config  # change options first
Size
205 KiB download · 610 KiB installed
Depends on
math/gmp 6.3.0, security/gnutls 3.8.13, security/libtasn1 4.21.0, security/nettle 3.10.2, x11/libX11 1.8.14,1, x11/libXcursor 1.2.3, x11/libXrandr 1.5.5
License
GPLv3
Options
2 of 6 on in the package: DOCS IPV6
Show the 4 options that are off
AO DEBUG SAMPLERATE SMARTCARD

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.9.0_11.9.0_1–
FreeBSD 151.9.0_11.9.0_1–
FreeBSD 141.9.0_11.9.0_11.9.0_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.9.0_11.9.0_1–
FreeBSD 141.9.0_11.9.0_11.9.0_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (3)

The CVE record lists the packaged version 1.9.0_1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-1122787.12026-10-19rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows malicious RDP servers to crash clients. Attacke…
CVE-2026-1122797.12026-10-19rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash clients via crafted…
CVE-2026-1122777.12026-10-19rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to crash clients by sending malf…

VuXML only (0)

Listed in VuXML, the packaged version 1.9.0_1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (91)

David E. O'Brien (obrien) · 1.4.1
Missed a keymap in the 1.4.1 update.

Submitted by:	pointyhat
f7dc193545
David E. O'Brien (obrien) · 1.4.1
Update to version 1.4.1.
ac0131f43a
David E. O'Brien (obrien) · 1.4.0_2
Update maintainer.
da30aa803a
Pav Lucistnik (pav) · 1.4.0_2
- Back out unicode patches, they broke a lot of basic functionality, like   username and password presets

Reported by:	several
a0b42d4337
Florent Thoumie (flz) · 1.4.0_1
- Add unicode support (this is already in rdesktop CVS tree, so this will be removed when rdesktop will release 1.4.1).

PR:		ports/78710
Submitted by:	Alex Miller <asm@asm.kiev.ua>
Obtained from:	rdesktop project
b2f6cc5296
Florent Thoumie (flz) · 1.4.0
- Remove EXTRA_PATCHES.

Noticed by:	Steve Tremblett <sjt@cisco.com>
Pointyhat to:	obrien
ad9788b6db
Sergei Kolobov (sergei) · 1.4.0
- Fix X11 libraries search - explicitly pass ${X11BASE} to configure   This fixes X11 dependency when X11BASE != /usr/X11R6 - While I'm here, pacify portlint(1) by moving EXTRA_PATCHES to go   after MAINTAINER section

PR:             ports/77854
Submitted by:   sergei
Approved by:    Matt Douhan (ex-maintainer)
8ad6de3dd7
Michael Nottebrock (lofi) · 1.4.0
Reset maintainership.

Approved by: ex-maintainer
e1c1573177
David E. O'Brien (obrien) · 1.4.0
Sort the keymaps.
02eb219602
David E. O'Brien (obrien) · 1.4.0
Upgrade to version 1.4.0. (this was missed in the Makefile commit)
a93083ea2b
David E. O'Brien (obrien) · 1.4.0
Upgrade to version 1.4.0.
7f48b966c6
David E. O'Brien (obrien) · 1.3.1_3
Fix '[1077366] Send Client IP instead of 127.0.0.1 using RDPv5'

Obtained from:	http://sourceforge.net/tracker/index.php?func=detail&aid=1077366&group_id=24366&atid=381349
d536ae2e17
Michael Nottebrock (lofi) · 1.3.1_2
Fix rdesktop with KDE 3.3's krdc.

PR: ports/72975
Submitted by: maintainer
aae95f476b
Pav Lucistnik (pav) · 1.3.1_1
- Respect CC

PR:		ports/65111
Submitted by:	michael johnson <ahze@ahze.net>
Approved by:	maintainer
46247b5ffa
Trevor Johnson (trevor) · 1.3.1_1
SIZEify (maintainer timeout)
8232e82f85
Joe Marcus Clarke (marcus) · 1.3.1_1
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)
73f7c91b5d
Pav Lucistnik (pav) · 1.3.1
* Update to 1.3.1 - crypto fixes for RDP5 - keyboard and keymap fixes - some endianess fixes for high color

PR:		ports/61871
Submitted by:	Chris Knight <chris@e-easy.com.au>
Approved by:	maintainer
6ac9d7bc84
David E. O'Brien (obrien) · 1.3.0
minor style tweak
cc5a79609f
Sergei Kolobov (sergei) · 1.3.0
- Update to 1.3.0 [1]:   - Added RDP version 5 support.   - Cut'n'paste between RDP session and X11 applications is now possible   - Can connect to console on Windows 2003 servers   - Added preliminary sound support   - Support 15, 16 and 24-bit color depths - While I'm here [2]:   - install some documentation   - slightly clarify COMMENT and pkg-descr   - simplify do-install target   - use DATADI

PR:		57635, 58703 [1]
Submitted by:	Chris Knight <chris@e-easy.com.au> [1], sergei [2]
f2d7ebe533
Hye-Shik Chang (perky) · 1.2.0
- Turn on the "SAVE_LICENSE" option. - Give a maintainership to the submitter.

PR:		50456
Submitted by:	Matt Douhan <mdouhan@wizzy.ath.cx>
b182d95a16
Edwin Groothuis (edwin) · 1.2.0
Release maintainership

PR:		ports/48620
Submitted by:	Chris Knight <chris@aims.com.au>
0ae9874aee
Akinori MUSHA (knu) · 1.2.0
De-pkg-comment.
4c2e4f1862
Jimmy Olgeni (olgeni) · 1.2.0
Add missing patches from ports/47715, remove ALL_TARGET from Makefile.

PR:		47715
Noticed by:	maintainer
686d9ae7e5
Jimmy Olgeni (olgeni) · 1.2.0
Add missing ALL_TARGET.

Submitted by:	Pav Lucistnik <pav_cz@volny.cz>
ac3d255704
Jimmy Olgeni (olgeni) · 1.2.0
Upgrade rdesktop to 1.2.0.

PR:		47715
Submitted by:	Chris Knight <chris@aims.com.au>
163138ea7d
David E. O'Brien (obrien) · 1.0.0.p19.7.6_1
Reduce the sed exec'ing an order of magnitude.  Minor code repositioning also.
3539b401b1
Christian Weisgerber (naddy) · 1.0.0.p19.7.6_1
Fix regexp for REINPLACE_CMD.

PR:		41204
Submitted by:	Simon L. Nielsen <simon@nitro.dk>
8bdf309b84
Dmitry Sivachenko (demon) · 1.0.0.p19.7.6_1
USE_REINPLACE; Chase library version of libgmp4;

PR:		39975
Submitted by:	"Chris Knight" <chris@aims.com.au> (maintainer)
eec84bcf45
Ying-Chieh Liao (ijliao) · 1.0.0.p19.7.6_1
libgmp3 -> libgmp4

PR:		37580
Submitted by:	maintainer
3a997c8c24
David W. Chapman Jr. (dwcjr) · 1.0.0.p19.7.6
Fix LDFLAG to for libgmp depend

Submitted by:	maintainer
e0ee15c1f5
David W. Chapman Jr. (dwcjr) · 1.0.0.p19.7.6
Fix dependency(libgmp-freebsd port is broken) $OSVERSION == 500023 still contained libgmp It's a *library* so use LIB_DEPENDS

Submitted by:	kris
f3f54dbeb9
David W. Chapman Jr. (dwcjr) · 1.0.0.p19.7.6
Fix for -current due to lack of libgmp in base system

PR:		36651
Submitted by:	maintainer
564d6717a3
Assar Westerlund (assar) · 1.0.0.p19.7.6
remove unused patch (superseded by unified patch 19.7.4)

PR:		ports/31246
Submitted by:	maintainer
ca0d2db64f
David W. Chapman Jr. (dwcjr) · 1.0.0.p19.7.6
Update to 1.0.0p19.7.6

PR:		32918
Submitted by:	maintainer
fcd31b6dc4
Pete Fritchman (petef) · 1.0.0.p19.7.5
Update to patchlevel 19.7.5.

PR:		32257
Submitted by:	maintainer
fed9165c1d
David W. Chapman Jr. (dwcjr) · 1.0.0.p19.7.4
Update to 1.0.0.p19.7.4

PR:		31246
Submitted by:	maintainer
438770d94f
Assar Westerlund (assar) · 1.0.0.p19.7.2_1
bump PORTREVISION (addition of patch for hostnames longer than 15 characters)

Suggested by:	"David W. Chapman Jr." <dwcjr@inethouston.net>
8f60fa5484
Assar Westerlund (assar) · 1.0.0.p19.7.2
patch around crashes for hostnames longer than 15 characters

PR:		ports/30159
Approved by:	chris@aims.com.au	(maintainer)
def9cc8a25
Ying-Chieh Liao (ijliao) · 1.0.0.p19.7.2
Update rdesktop to 1.0.0 unified patch 19.7.2 Check for unified patch in multiple locations

PR:		29768
Submitted by:	MAINTAINER
f699af7767
David W. Chapman Jr. (dwcjr) · 1.0.0.p19.6.6
Update to unified patch 19.6.6

PR:		28857
Submitted by:	maintainer
e3528b3e85
Doug Barton (dougb) · 1.0.0.p19.6.4
Rdesktop is an open source client for Windows NT Terminal Server, capable of natively speaking its Remote Desktop Protocol (RDP) in order to present the user's NT desktop.  Unlike Citrix ICA, no server extensions are required.

PR:		ports/23524
Submitted by:	Matthew West <mwest@uct.ac.za>
f34f153f0c