Public bug reported: [Impact] After updating libfreerdp3-3 from 3.32.0 to 3.32.1 in resolute-updates/security, connecting through a proxy (/proxy:socks5://... or /proxy:http://..., also via http_proxy/https_proxy env vars in Remmina) fails immediately with:
[proxy_parse_uri]: Parsed proxy configuration: http://127.0.0.1:8888 [nego_connect]: Failed to connect [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C] Direct connections still work. Remmina 1.4.43 is affected as well, since it uses libfreerdp. [Upstream] The regression is known and fixed in FreeRDP master: - Issue: https://github.com/FreeRDP/FreeRDP/issues/13620 (closed as duplicate) - Fix: https://github.com/FreeRDP/FreeRDP/pull/13547 "[core,proxy] fix inverted validity check" commit 0be010f5f6675dd69915e73ab9c40115dbc4ee7d (merged 2026-09-28) I have not verified whether this commit is already in a released upstream version newer than 3.32.1. [Test case] 1. Run a local SOCKS5 or HTTP proxy (e.g. ssh -D 1080 user@host). 2. xfreerdp /v:SERVER:3389 /u:USER /proxy:socks5://127.0.0.1:1080 3. Expected: connection through the proxy. Actual: error above. The proxy itself works: nc -v -X 5 -x 127.0.0.1:1080 SERVER 3389 succeeds. [Diagnostics] strace shows connect() to the proxy port succeeds (SO_ERROR=0), but FreeRDP never writes anything on that socket (no HTTP CONNECT, no SOCKS handshake) and aborts. The proxy logs "read http request: EOF". [Environment] Ubuntu 26.04 (resolute) freerdp3 / libfreerdp3-3: 3.32.1+dfsg-0ubuntu0.26.04.1 (worked with 3.32.0) remmina 1.4.43 [Request] Please backport the upstream fix (commit 0be010f) to resolute-updates/security. Workaround: relay via socat + nc -X 5, or rebuild the package with the patch. ProblemType: Bug DistroRelease: Ubuntu 26.04 Package: libfreerdp3-3 3.32.1+dfsg-0ubuntu0.26.04.1 ProcVersionSignature: Ubuntu 7.0.0-1008.9-gke 7.0.14 Uname: Linux 7.0.0-1008-gke x86_64 ApportVersion: 2.34.1-0ubuntu0.1 Architecture: amd64 CasperMD5CheckResult: pass CurrentDesktop: ubuntu:GNOME Date: Tue Oct 13 10:00:42 2026 InstallationDate: Installed on 2026-08-03 (71 days ago) InstallationMedia: Ubuntu 26.04 "Resolute Raccoon" - Release amd64 (20260423.1) SourcePackage: freerdp3 UpgradeStatus: No upgrade log present (probably fresh install) ** Affects: freerdp3 (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug regression-update resolute wayland-session -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2170665 Title: libfreerdp3-3 3.32.1: RDP through SOCKS5/HTTP proxy broken (ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED), fixed upstream To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freerdp3/+bug/2170665/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
